Principal Product Security Architect — AI/Cloud

Chainguard; United Kingdom; Remote; GBP 110,000 - 170,000; Full time

Benefits offered by this job

Remote-friendly culture

Stock options

100% health coverage

Flexible time off

Parental leave

Job summary

Chainguard, the trusted source for open source, is seeking a Principal Product Security Engineer to lead security strategy for our major products. You will embed security across roadmaps, own large cross‑functional initiatives, and accelerate remediation with automation, risk framing, and policy‑as‑code.

You will mentor engineers, influence senior leaders, and advance secure‑by‑default tooling within a remote‑first environment that values autonomy and high standards.

Qualifications

• Over a decade of software or application security leadership.
• Experience driving risk management and security programs from design through rollout.
• Hands-on with cloud-native environments and security controls.
• Familiarity with SOC 2, ISO 27001, NIST, SLSA and related controls.
• Ability to automate security workflows and integrate into CI/CD.

Responsibilities

• Shape product security strategy across major products and platforms.
• Lead cross-functional security initiatives spanning multiple teams and quarters.
• Automate vulnerability detection, triage, and remediation with policy‑as‑code.
• Evolve security assurance programs including pentests, bug bounties and red‑team.
• Champion secure‑by‑default tooling and CI/CD integration.
• Support compliance programs and governance across the org.
• Mentor engineers and influence senior leaders; track emerging threats.

Skills

Security strategy

Risk management

Cloud-native security

AI security

Security compliance frameworks

CI/CD security automation

Stakeholder influence

Security leadership

Tools

Kubernetes

Job description

Chainguard, the trusted source for open source, is seeking a Principal Product Security Engineer to lead security strategy for our major products. You will embed security across roadmaps, own large cross‑functional initiatives, and accelerate remediation with automation, risk framing, and policy‑as‑code.

You will mentor engineers, influence senior leaders, and advance secure‑by‑default tooling within a remote‑first environment that values autonomy and high standards.