Software Supply Chain- Container Application Security Director

ADP is hiring a Director, Container Application Security (Software Supply Chain)

This Hybrid role can sit in Alpharetta, GA or Roseland, NJ

Unlock Your Career Potential:
Global Security Organization  you have a passion for going on the offensive to safeguard critical information? As ADP’s Global Security Organization (GSO), we know that our clients rely on us for human capital management solutions, but beyond that, they entrust us with one of their most valuable assets — their employee data. We are honored by this trust and are laser focused on securing data at every step in the information lifecycle, ensuring integrity, confidentiality and compliance with industry and government regulations at all times.

From the cloud to the data center and across every emerging device, you’ll join a team of experts in the GSO who are always staying one step ahead in this ever-changing world of data by continually evolving our strategies and technologies to protect ADP and our clients.

The mission of the GSO Enterprise Application Security [EAS] team is to protect ADP's internally developed products from existing and emerging security threats. We improve internal product security posture by integrating and automating security controls early in the product development life cycle and aid in uncovering security risks. This work empowers and supports development teams to recognize and address security risks in a timely manner.

The EAS team has an opening for Software Supply Chain
- Container Application Security Director to drive design, implement, and manage the container application security scanning services partnering with key stakeholders and deliver to assess the security risks and establish a governance framework for the secure use of models before released to the production use.

Learn more about ADP at

• Drive container application security including supply chain risk initiatives across ADP’s different business units.
• Institutionalize the container security scanning of images in line with shift left strategy in Dev Sec Ops .
• Manage supply chain, container application security vulnerability remediation flow.
• Develop and maintain the roadmap for container security & supply chain risk.
• Customize policies, rules, and alerts to comply with established policies and settings.
• Drive culture around secure application development through effective training, governance, and metrics
• Bring thought leadership into the program and drive excellence.
• Manage the project timelines and delivery.
• Maintain awareness of Kubernetes cybersecurity threats and best practices to enable securing and hardening Kubernetes clusters at scale
• Metrics/Reporting
  • Identify meaningful KPIs/KRI’s to drive progress, improvement & improvement.
  • Create dashboards to monitor significant events, traffic and data collection.
  • Provide weekly Scanning and Monitoring reports.
  • Create weekly, monthly and in-progress review presentations, as needed.
• Create and maintain Standard Operating Procedures (SOP)
• Establish strong partnership with key stakeholders in technology and product organizations.
• Manage communication upwards, downwards, and horizontally.

• Deep knowledge and understanding of container application security vulnerabilities (SANS, OWASP).
• Candidate should be very thorough in internet technologies and highly versed with web development secure coding best practices.
• Understanding CI/CD pipelines covering source control, integration, and deployment (ex: Bitbucket, Jenkins, Rally, JIRA, Artifactory, Nexus, Sonar Qube, git, Snyk).
• Previous software engineering/architecture experience (Java, C#,.Net, JavaScript, Python) preferred.
• Strong analytical/problem solving skills and cross functional knowledge across multiple development and…