Principal Product Security Engineer — Remote, Equity, Impact

Georgian; Canada; Remote; CAD 150,000 - 230,000; Full time

Benefits offered by this job

Flexible & Remote-First Culture

Stock options

100% Covered Health Insurance

Flexible Time Off

Parental Leave

Job summary

Chainguard is seeking a Principal Product Security Engineer to set product security direction across major products and platforms. You will lead cross‑functional security initiatives, automate vulnerability detection and remediation, and evolve assurance programs while advocating secure-by-default tooling.

The role requires mentoring others, influencing senior leaders, and staying ahead of evolving threat landscapes.

Qualifications

• 10+ years in software, product, or application security with ownership of complex products or platforms.
• Deep expertise in secure architecture for cloud-native/distributed systems including modern authz/authn and defense‑in‑depth patterns.
• Experience driving org‑level risk management and security programs (secure SDLC, AI SDLC, vulnerability management).

Responsibilities

• Shape product security strategy and guardrails for AI-assisted development through design, coding, testing and deployment.
• Lead cross‑functional security initiatives spanning multiple teams and quarters.
• Automate security workflows and vulnerability remediation, including policy‑as‑code and CI/CD integration.
• Evolve security assurance programs: pentests, vulnerability assessments, bug bounty, red‑team findings to engineering changes.
• Champion secure‑by‑default tooling and integrate security tools into CI/CD workflows.
• Support compliance with SOC 2, ISO 27001, NIST, and similar frameworks to drive durable controls.
• Mentor engineers and influence senior leaders to raise security maturity.

Skills

Security leadership

Secure SDLC

AI SDLC

Cloud-native security

Automation scripting

Stakeholder influence

Remote collaboration

Tools

Kubernetes

Job description

Chainguard is seeking a Principal Product Security Engineer to set product security direction across major products and platforms. You will lead cross‑functional security initiatives, automate vulnerability detection and remediation, and evolve assurance programs while advocating secure-by-default tooling.

The role requires mentoring others, influencing senior leaders, and staying ahead of evolving threat landscapes.