11d 6h ago
Staff Product Security Engineer
Chainguard·General InfoSec · Software
📡Remote In-Country
|United States of America$170k - $231k USD/yr
awsci/cdgcpgolang+2
Staff Product Security Engineer
Chainguard | General InfoSec | Software
Remote In-Country
Full Time
United States of America
$170k - $231k USD/yr
Position:
Staff Product Security Engineer
Company:
Chainguard
Compensation:
$170,000 - $231,000 USD
Location:
United States - Remote
Employment type:
Not specified
Work Arrangement:
Remote
Short Summary:
You are a deeply technical engineer who gets restless when pipelines aren't locked down. You care about shipping secure software! This is an individual-contributor Staff role, focusing on technical leadership, cross-team influence, and owning hard problems.
Responsibilities:
- Build & Harden Secure Pipelines: Design, build, and maintain secure CI/CD pipelines with security gates.
- Systematically capture the risk exposure of Chainguard's products.
- Implement software supply chain security controls: signed artifacts, SBOMs, provenance attestation.
- Identify emerging customer security needs and build solutions.
- Lead security architecture reviews and threat models for Kubernetes workloads on GCP and AWS.
- Harden container images and cloud IAM postures.
- Define and drive adoption of baseline security standards.
- Evaluate and operationalize CNAPP / CSPM tooling for continuous visibility into cloud-native risk.
Requirement:
- 7+ years in software engineering, security engineering, or a combined role with hands-on security responsibility.
- Strong proficiency in Go or Python.
- Deep experience with Kubernetes in production.
- Practical expertise with GCP and/or AWS.
- Proven track record designing and securing CI/CD pipelines.
- Fluency with container security and software supply chain security tooling.
- Solid understanding of OWASP, NIST, and cloud security frameworks.
Benefits:
- Flexible & Remote-First Culture: Work remotely with team meetups and stipends for coworking spaces.
- Equity: Stock options upon hire and promotion, with 10 years to exercise options.
- 100% Covered Health Insurance: Health, vision, and dental insurance premiums covered for you and your dependents.
- Flexible Time Off: Take the time you need to recharge.
- 18 Weeks Paid Parental Leave: 18 weeks for birthing parents and 12 weeks for non-birthing parents.
Staff Product Security Engineer
Company:
Chainguard
Compensation:
$170,000 - $231,000 USD
Location:
United States - Remote
Employment type:
Not specified
Work Arrangement:
Remote
Short Summary:
You are a deeply technical engineer who gets restless when pipelines aren't locked down. You care about shipping secure software! This is an individual-contributor Staff role, focusing on technical leadership, cross-team influence, and owning hard problems.
Responsibilities:
- Build & Harden Secure Pipelines: Design, build, and maintain secure CI/CD pipelines with security gates.
- Systematically capture the risk exposure of Chainguard's products.
- Implement software supply chain security controls: signed artifacts, SBOMs, provenance attestation.
- Identify emerging customer security needs and build solutions.
- Lead security architecture reviews and threat models for Kubernetes workloads on GCP and AWS.
- Harden container images and cloud IAM postures.
- Define and drive adoption of baseline security standards.
- Evaluate and operationalize CNAPP / CSPM tooling for continuous visibility into cloud-native risk.
Requirement:
- 7+ years in software engineering, security engineering, or a combined role with hands-on security responsibility.
- Strong proficiency in Go or Python.
- Deep experience with Kubernetes in production.
- Practical expertise with GCP and/or AWS.
- Proven track record designing and securing CI/CD pipelines.
- Fluency with container security and software supply chain security tooling.
- Solid understanding of OWASP, NIST, and cloud security frameworks.
Benefits:
- Flexible & Remote-First Culture: Work remotely with team meetups and stipends for coworking spaces.
- Equity: Stock options upon hire and promotion, with 10 years to exercise options.
- 100% Covered Health Insurance: Health, vision, and dental insurance premiums covered for you and your dependents.
- Flexible Time Off: Take the time you need to recharge.
- 18 Weeks Paid Parental Leave: 18 weeks for birthing parents and 12 weeks for non-birthing parents.
Required Skills
awsci/cdgcpgolangkubernetespython
Required Languages
🇬🇧 English
Key competency: General InfoSec