Logos Space
Security Platform Lead (CI/CD + Supply Chain Security + Devsecops)
Mountain View or San Diego · Contract
Sponsorship not specified$218k-$800kDetected 89 days ago
GitDockerKubernetesCI/CDGitHub ActionsJenkinsCybersecuritySupply ChainLeadershipProblem SolvingMentoring
About the role
- This role ensures all software delivered meets strong integrity and traceability guarantees.
Responsibilities
- Software Supply Chain Security: Lead the design and implementation of a secure software supply chain.
- CI/CD System: Build and manage a high-assurance Continuous Integration/Continuous Delivery (CI/CD) system, securing tools like GitHub Actions, GitLab, and Jenkins.
- Pipeline and Infrastructure Security: Define and implement security hardening standards for the software build and deployment environments, including securing container images, container runtime (Docker/Podman), and container orchestration platforms (Kubernetes).
- Design and integrate the AI Wrapper Layer into the CI/CD pipeline to enforce governance, logging, and policy for AI usage, preventing unsafe usage and data leakage.
- Design and secure the Agentic Architecture, including the Agentic Layer and Model Context Protocol (MCP) servers, to provide controlled, auditable access to internal systems for AI security workflows.
- Artifact Integrity: Implement controls for artifact signing and provenance tracking, ensuring all software delivered meets strong integrity and traceability guarantees.
- Compliance: Develop the platform architecture and controls necessary to achieve SLSA Level 3/4 targets and ensure NIST SSDF (800-218) compliance.
- Build Environment: Implement controlled build environments to support reproducible builds.
- SBOM: Drive the generation and tracking of Software Bill of Materials (SBOM) to meet emerging DoD mandates.
- Lead the design and implementation of a secure software supply chain.
Requirements
- Minimum of 7-10 years of experience in DevSecOps engineering, with demonstrable experience building high-assurance software delivery systems and securing cloud/containerized environments.
- Strong knowledge of secure software development lifecycles (SDLC), automation frameworks, and established security principles.
- Strong knowledge of security principles, best practices, and frameworks (e.g.Zero http://e.g.Zero Trust, defense-in-depth).
- Familiarity with Supply-chain Levels for Software Artifacts (SLSA)
- Offers will be contingent on the candidate's ability to access export-controlled information under U.S. law.
Nice to have
- Bachelor's degree in Computer Science, Cybersecurity, or a related field (Master's degree preferred).
Skills
- Speed and reliability are the foundation of the system.
- About Logos Space Engineering
Compensation
- Your level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.
Apply directly at Logos Space →Create a free account for alerts like thisView Logos Space immigration profile
This listing is sourced directly from Logos Space's careers page and normalized into a canonical job model.