Senior Security Engineer - Build & Supply Chain

MatX; Mountain View (CA); On-site; USD 250,000 - 600,000; Full time

Benefits offered by this job

4 weeks PTO + holidays + remote work

Health & dental benefits

Retirement plan options

Wellbeing and parental leave

Job summary

MatX in Mountain View, CA is seeking a Senior Security Engineer to secure software, build systems, and cloud infrastructure across a fast-moving ML platform. You will own supply chain and build integrity, perform adversarial reviews, and drive vulnerability management, threat modeling, and secure SDLC integration.

This is a hands-on engineering role at a high-growth startup, with emphasis on practical impact and cross-team collaboration.

Qualifications

• 8+ years in security engineering with depth in at least two areas.
• Experience with threat modeling, manual secure code review, and vulnerability tooling.

Responsibilities

• Own and grow supply chain and build integrity program including artifact signing and SBOM generation.
• Bring adversarial perspective to code, build tooling, and internal services.
• Conduct vulnerability research and drive fixes and durable controls.
• Partner with software, compiler, ML, and silicon teams on threat modeling and design reviews.
• Harden cloud infrastructure: IAM, network segmentation, secrets management, IaC review.
• Build and run vulnerability management program and drive remediation.
• Integrate security into the SDLC with code scanning and pre-merge checks.
• Write automation and tools to scale security work.
• Protect highly sensitive IP and export-controlled data with cross-team controls.

Skills

Security engineering

Threat modeling

Code review

Cloud security

Build integrity

Offensive security

Go/Python/Rust

Cloud providers (GCP/AWS/Azure)

SAST/DAST/SCA tooling

Tools

Sigstore/cosign

Terraform

Job description

MatX in Mountain View, CA is seeking a Senior Security Engineer to secure software, build systems, and cloud infrastructure across a fast-moving ML platform. You will own supply chain and build integrity, perform adversarial reviews, and drive vulnerability management, threat modeling, and secure SDLC integration.

This is a hands-on engineering role at a high-growth startup, with emphasis on practical impact and cross-team collaboration.