Software Supply Chain Security Engineer - Sunnyvale, CA, United States
Originally posted 21 September 2026 by the employer — open 0 days.
About the role
This role involves building a secure foundation for build and development workflows, hardening every layer of the source to artifact pipeline from code management to cluster deployment. The position focuses on securing CI/CD artifacts and the end-to-end integration of the software supply chain.
What you'll do
- Define core security requirements for artifact build pipelines, including maturing SLSA processes.
- Partner with platform, infrastructure, networking, and hardware teams to identify supply chain gaps and deliver end-to-end solutions for ensuring confidence in CI/CD artifacts.
- Develop threat models for each layer of the build and deploy stack, outlining trust boundaries and the interplay between first and third-party mechanisms.
- Work with engineering leads and devops architects to build in secure supply chain principles.
- Document security posture and strategy for technical and nontechnical audiences from both 1p and 3p perspectives.
What you'll need
- 8-10 years of experience with software supply chain and SDLC topics including secure code management, build pipeline hardening, artifact signing and attestation, and the end-to-end integration thereof.
- Strong hands-on engineering abilities in devops and SDLC contexts.
- Ability to work in fragmented and legacy build environments.
Nice to have
- Masters in Computer Science or PhD.
- Experience with modernizing stacks.
- Familiarity with AWS, Jenkins, SLSA, and best practices for secure artifact provenance and builds.
- Direct work with Agentic workflows and deep understanding of LLM and reasoning cycles.
Skills: software supply chain, SLSA, CI/CD artifacts, threat models, secure code management
This role has been open 0 days — well below the 54-day median for Hardware Security Engineering roles.
Hardware Security Engineering · Hardware Security
|
Open roles in category
163
|
Median days open
54 d
|
Median salary
$223k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | Cerebras | All employers we track in this specialty (163 roles · 45 employers) |
|---|---|---|
| Open roles in this specialty | 4 | 163 |
| Median days open | 9 d | 54 d (−45 d vs this employer) |
| Median salary (USD postings) | — | $223k |
Skills observed across this category: software supply chain, SLSA, CI/CD artifacts, threat models, secure code management
Who's hiring in this category
- NXP Semiconductors · 25 open roles · median 81 d
- NVIDIA · 20 open roles · median 26 d
- Qualcomm · 17 open roles · median 97 d
- Arm Holdings · 13 open roles · median 75 d
- AMD · 10 open roles · median 29 d
- Intel Corporation · 6 open roles · median 123 d
How we counted: 163 open Hardware Security Engineering (Hardware Security) roles from 45 employers tracked in the SemiconductorJobs index, counted 21 Sept 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there. Figures refresh nightly.