Supply Chain Engineer: Reproducible Builds & Provenance

HushOne, Inc.; Kirkland (WA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Stock options

401(k) with company matching

Gym membership

Job summary

HushOne, Inc. seeks a security-focused release engineer to create reproducible packaging, inventories, and provenance for software, firmware, containers, models, and extensions.

You will design signing-key rotation and recovery from compromised releases, ensuring traceability from source to user. In your first 90 days you will produce a signed release with SBOM, verifiable provenance, and a tested rollback path, while addressing how to respond to compromised dependencies and strengthen CI/CD

Job description

HushOne, Inc. seeks a security-focused release engineer to create reproducible packaging, inventories, and provenance for software, firmware, containers, models, and extensions.

You will design signing-key rotation and recovery from compromised releases, ensuring traceability from source to user. In your first 90 days you will produce a signed release with SBOM, verifiable provenance, and a tested rollback path, while addressing how to respond to compromised dependencies and strengthen CI/CD