Software Supply Chain Security Engineer

Cerebras is seeking a Software Supply Chain Security Engineer to help build a secure foundation for our build and development workflows.

In this role you will be responsible for assessing and hardening every layer of our source to artifact pipeline, from how we store and manage code to what we deploy into our clusters.

The ideal candidate brings a combination of wide breadth of knowledge on a variety of software supply chain topics throughout the whole SDLC process, a pragmatic and results-driven outlook on security, and the flexibility and attention to detail to work in a fast-paced development environment without compromising our security standards.

• Define core security requirements for artifact build pipelines including maturing SLSA processes, and see them through from ideation to implementation
• Partner with platform, infrastructure, networking, and hardware teams to identify supply chain gaps and deliver end-to-end solutions for ensuring confidence in CI/CD artifacts
• Develop threat models for each layer of the build and deploy stack, outlining trust boundaries and the interplay between first and third-party mechanisms
• Work with engineering leads and devops architects to build in secure supply chain principles from the beginning
• Balance engineering outcomes with security controls, enabling the company to deliver securely quickly
• Document security posture and strategy for technical and nontechnical audiences from both 1p and 3p perspectives

SKILLS AND QUALIFICATIONS

…