Security Platform Lead (CI/CD + Supply Chain Security + Devsecops)

The Role

The Security Platform Lead will lead the design and implementation of a secure software supply chain. You will be responsible for building a high-assurance CI/CD system supporting artifact signing, provenance tracking, and reproducible builds. This role ensures all software delivered meets strong integrity and traceability guarantees.

Key Responsibilities

• Software Supply Chain Security: Lead the design and implementation of a secure software supply chain.
• CI/CD System: Build and manage a high-assurance Continuous Integration/Continuous Delivery (CI/CD) system, securing tools like GitHub Actions, GitLab, and Jenkins.
• Pipeline and Infrastructure Security: Define and implement security hardening standards for the software build and deployment environments, including securing container images, container runtime (Docker/Podman), and container orchestration platforms (Kubernetes).
• AI Security Integration:
• Design and integrate the AI Wrapper Layer into the CI/CD pipeline to enforce governance, logging, and policy for AI usage, preventing unsafe usage and data leakage.
• Embed AI as an advisory capability within the CI/CD pipeline to augment traditional security tools (like Snyk and Semgrep) for use cases such as risk identification, vulnerability explanation, prioritization, and remediation suggestions.
• Design and secure the Agentic Architecture, including the Agentic Layer and Model Context Protocol (MCP) servers, to provide controlled, auditable access to internal systems for AI security workflows.
• Artifact Integrity: Implement controls for artifact signing and provenance tracking, ensuring all software delivered meets strong integrity and traceability guarantees.
• Compliance: Develop the platform architecture and controls necessary to achieve SLSA Level 3/4 targets and ensure NIST SSDF (800-218) compliance.
• Build Environment: Implement controlled build environments to support reproducible builds.
• SBOM: Drive the generation and tracking of Software Bill of Materials (SBOM) to meet emerging DoD mandates.
• Team Growth and Leadership: Actively grow the Logos security team by recruiting top-tier talent and providing technical guidance and mentorship to contribute to the overall security organization growth.

Basic Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field (Master's degree preferred).
• Minimum of 7-10 years of experience in DevSecOps engineering, with demonstrable experience building high-assurance software delivery systems and securing cloud/containerized environments. Strong knowledge of secure software development lifecycles (SDLC), automation frameworks, and established security principles.
• Strong knowledge of security principles, best practices, and frameworks (e.g.Zero Trust, defense-in-depth).
• Excellent analytical, problem-solving, and low-level debugging skills

Ability to work independently and as part of a collaborative team in a fast-moving environment.

Must-Have Skills

• CI/CD security (GitHub Actions, GitLab, Jenkins)
• Software supply chain security
• Container and orchestration security (Docker, Kubernetes)
• Provenance, SBOM, artifact signing
• Familiarity with Supply-chain Levels for Software Artifacts (SLSA)
• Reproducible builds, build systems

Pay and benefits

Your level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

We seek to create an environment where everyone can reach their full potential and drive outstanding results. This policy applies with regard to all aspects of one's employment, including hiring, transfer, promotion, compensation, eligibility for benefits, and termination. Offers will be contingent on the candidate's ability to access export-controlled information under U.S. law.