Secure AI Build & Software Supply Chain Engineer

Cerebras; Sunnyvale (CA); On-site; USD 180,000 - 270,000; Full time

Job summary

Cerebras Systems in Sunnyvale, CA is seeking a Software Supply Chain Security Engineer to harden the software supply chain across the SDLC, from code storage to artifact deployment in clusters.

You will define core security requirements, collaborate with platform, infrastructure, networking, and hardware teams, develop threat models, and balance security with rapid delivery while documenting posture for diverse audiences.

Qualifications

• 8-10 years of experience with software supply chain and SDLC topics.
• Masters in Computer Science or PhD preferred.
• Hands-on engineering abilities in devops and SDLC contexts.
• Experience with fragmented/legacy build environments and modernization.
• Familiarity with AWS, Jenkins, SLSA and secure artifact provenance.
• Strong written communication to explain security concepts.
• Direct work with Agentic workflows and LLM understanding.

Responsibilities

• Define core security requirements for artifact build pipelines and mature SLSA processes.
• Partner with platform, infrastructure, networking, and hardware teams to close supply chain gaps.
• Develop threat models for each layer of the build and deploy stack.
• Collaborate with engineering leads to embed secure supply chain principles from the start.
• Balance engineering outcomes with security controls for fast, secure delivery.
• Document security posture and strategy for technical and nontechnical audiences.

Skills

Software supply chain

SDLC

DevOps

Secure code management

Artifact signing

Threat modeling

Communication

LLM understanding

Education

Masters in CS or PhD

Tools

AWS

Jenkins

SLSA

Job description

Cerebras Systems in Sunnyvale, CA is seeking a Software Supply Chain Security Engineer to harden the software supply chain across the SDLC, from code storage to artifact deployment in clusters.

You will define core security requirements, collaborate with platform, infrastructure, networking, and hardware teams, develop threat models, and balance security with rapid delivery while documenting posture for diverse audiences.