Software Supply Chain Security Engineer

Highlights

• Harden every layer of the source-to-artifact pipeline for AI infrastructure.
• Define core security requirements for artifact pipelines end to end.
• Build threat models outlining trust across build and deploy layers.

Ideal candidate

Pragmatic security-minded engineer with deep SDLC breadth who thrives in fast-paced, fragmented environments and cares about shipping secure systems quickly while making security approachable for others.

Requirements

• 8-10 years of experience with software supply chain and SDLC topics including secure code management, build pipeline hardening, artifact signing and attestation
• Masters in Computer Science or PhD preferred
• Strong hands-on engineering abilities in devops and SDLC contexts
• Ability to work in fragmented and legacy build environments, experience with modernizing stacks is a plus
• Familiarity with AWS, Jenkins, SLSA, and best practices for secure artifact provenance and builds a plus
• Strong written communication skills, with the ability to make security concepts approachable for non-specialists
• Direct work with Agentic workflows and deep understanding of LLM and reasoning cycles