Software Supply Chain Security Engineer

About the role

Cerebras Systems builds a large-scale AI chip and partners with model labs, enterprises and AI-native startups. It is seeking a Software Supply Chain Security Engineer to help build a secure foundation for its build and development workflows. The engineer assesses and hardens every layer of the source-to-artifact pipeline, from how code is stored and managed to what is deployed into clusters.

Key responsibilities

• Define core security requirements for artifact build pipelines, including maturing SLSA processes, and see them through from ideation to implementation.
• Partner with platform, infrastructure, networking and hardware teams to identify supply chain gaps and deliver end-to-end solutions for confidence in CI/CD artifacts.
• Develop threat models for each layer of the build and deploy stack, outlining trust boundaries and the interaction between first- and third-party mechanisms.
• Work with engineering leads and DevOps architects to embed secure supply chain principles early.
• Balance engineering outcomes with security controls so the company can deliver securely and quickly.
• Document the security posture and strategy for technical and non-technical audiences, from both first- and third-party perspectives.

Required profile

• 8-10 years of experience with software supply chain and SDLC topics, including secure code management, build pipeline hardening, artifact signing and attestation, and their end-to-end integration.
• Masters in Computer Science or PhD (preferred).
• Strong hands-on engineering abilities in DevOps and SDLC contexts.
• Ability to work in fragmented and legacy build environments; experience modernizing stacks is a plus.
• Strong written communication, able to explain security concepts to non-specialists.

Required skills

• DevOps and SDLC
• AWS, Jenkins, SLSA and secure artifact provenance and build best practices (a plus)
• Direct work with agentic workflows and a deep understanding of LLM and reasoning cycles (a plus)