Staff Product Security Engineer

Position:
Staff Product Security Engineer

Company:
Chainguard

Compensation:
$170,000 - $231,000 USD

Location:
United States - Remote

Employment type:
Not specified

Work Arrangement:
Remote

Short Summary:
You are a deeply technical engineer who gets restless when pipelines aren't locked down. You care about shipping secure software! This is an individual-contributor Staff role, focusing on technical leadership, cross-team influence, and owning hard problems.

Responsibilities:
- Build & Harden Secure Pipelines: Design, build, and maintain secure CI/CD pipelines with security gates.
- Systematically capture the risk exposure of Chainguard's products.
- Implement software supply chain security controls: signed artifacts, SBOMs, provenance attestation.
- Identify emerging customer security needs and build solutions.
- Lead security architecture reviews and threat models for Kubernetes workloads on GCP and AWS.
- Harden container images and cloud IAM postures.
- Define and drive adoption of baseline security standards.
- Evaluate and operationalize CNAPP / CSPM tooling for continuous visibility into cloud-native risk.

Requirement:
- 7+ years in software engineering, security engineering, or a combined role with hands-on security responsibility.
- Strong proficiency in Go or Python.
- Deep experience with Kubernetes in production.
- Practical expertise with GCP and/or AWS.
- Proven track record designing and securing CI/CD pipelines.
- Fluency with container security and software supply chain security tooling.
- Solid understanding of OWASP, NIST, and cloud security frameworks.

Benefits:
- Flexible & Remote-First Culture: Work remotely with team meetups and stipends for coworking spaces.
- Equity: Stock options upon hire and promotion, with 10 years to exercise options.
- 100% Covered Health Insurance: Health, vision, and dental insurance premiums covered for you and your dependents.
- Flexible Time Off: Take the time you need to recharge.
- 18 Weeks Paid Parental Leave: 18 weeks for birthing parents and 12 weeks for non-birthing parents.