Senior Software Supply Chain Security Engineer

Socket.dev; Sunnyvale (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Cerebras Systems seeks a Software Supply Chain Security Engineer to harden every layer of our build and deployment pipelines. You will assess sources to artifacts, enforce SLSA-like controls, and partner with platform, infrastructure, networking, and hardware teams to reduce risk across CI/CD workflows.

The ideal candidate has 8–10 years of experience with software supply chain topics, strong DevOps and SDLC skills, and hands-on ability to modernize fragmented build environments.

Qualifications

• 8-10 years of experience with software supply chain and SDLC topics.
• Masters in Computer Science or PhD preferred.
• Hands-on engineering in DevOps and SDLC contexts.
• Experience modernizing legacy build environments.
• Familiarity with AWS, Jenkins, and SLSA best practices.
• Strong written communication suitable for non-specialists.
• Experience with Agentic workflows and LLM reasoning cycles.

Responsibilities

• Define core security requirements for artifact build pipelines including maturing SLSA processes, and see them through from ideation to implementation.
• Partner with platform, infrastructure, networking, and hardware teams to identify supply chain gaps and deliver end-to-end solutions for ensuring confidence in CI/CD artifacts.
• Develop threat models for each layer of the build and deploy stack, outlining trust boundaries and the interplay between first and third-party mechanisms.
• Work with engineering leads and devops architects to build in secure supply chain principles from the beginning.
• Balance engineering outcomes with security controls, enabling the company to deliver securely quickly.
• Document security posture and strategy for technical and nontechnical audiences from both 1p and 3p perspectives.

Skills

Secure code management

DevOps practices

SDLC knowledge

Excellent written communication

LLM/Agentic workflows understanding

Education

Master's in Computer Science or PhD

Tools

AWS

Jenkins

SLSA

Job description

Cerebras Systems seeks a Software Supply Chain Security Engineer to harden every layer of our build and deployment pipelines. You will assess sources to artifacts, enforce SLSA-like controls, and partner with platform, infrastructure, networking, and hardware teams to reduce risk across CI/CD workflows.

The ideal candidate has 8–10 years of experience with software supply chain topics, strong DevOps and SDLC skills, and hands-on ability to modernize fragmented build environments.