Software Supply Chain Security Engineer

The role

This person will assess and harden every layer of the source to artifact pipeline. They will build a secure foundation for build and development workflows.

What you will do

• Define core security requirements for artifact build pipelines including maturing SLSA processes
• Partner with platform, infrastructure, networking, and hardware teams to identify supply chain gaps
• Develop threat models for each layer of the build and deploy stack
• Work with engineering leads and devops architects to build in secure supply chain principles
• Balance engineering outcomes with security controls
• Document security posture and strategy for technical and nontechnical audiences

Required qualifications

• 8-10 years of experience with software supply chain and SDLC topics including secure code management, build pipeline hardening, artifact signing and attestation, and the end-to-end integration thereof
• Strong hands-on engineering abilities in devops and SDLC contexts
• Strong written communication skills
• Direct work with Agentic workflows and deep understanding of LLM and reasoning cycles

Nice to have

• Masters in Computer Science or PhD
• Ability to work in fragmented and legacy build environments
• experience with modernizing stacks
• Familiarity with AWS, Jenkins, SLSA, and best practices for secure artifact provenance and builds

About the company

Cerebras Systems builds the world's largest AI chip. The company works with leading model labs, global enterprises, and cutting-edge AI-native startups.