Principal Product Security Engineer — Remote & Equity

Georgian; United Kingdom; À distance; GBP 150 000 - 230 000; Plein temps

Avantages offerts par ce poste

Remote-friendly culture

Equity participation

Health insurance 100% covered

Flexible time off

Parental leave

Résumé du poste

Chainguard, the trusted source for open source, is seeking a Principal Product Security Engineer in a remote-first capacity. You will set product security direction, lead large-scale initiatives, and embed security by design across major products and platforms while partnering with engineering and product leadership to deliver secure, compliant, and production-ready software.

You will influence senior stakeholders, mentor security engineers, and stay ahead of evolving threats and supply-chain

Qualifications

• 10+ years in software, product, or application security with ownership of complex products or platforms.
• Deep expertise in secure architecture and system design for cloud-native or distributed systems; modern authz/authn and defense-in-depth patterns.
• Experience driving org-level risk management and security programs (secure SDLC, AI SDLC, vulnerability management) from design through rollout.
• Strong hands-on familiarity with cloud-native environments (containers, Kubernetes, public cloud) and security controls.
• Experience with security compliance frameworks (SOC 2, ISO 27001, SLSA) and translating controls into practical engineering work.
• Ability to automate security workflows in at least one language (Go, Python, Shell) and integrate them into CI/CD.
• Proven ability to influence senior stakeholders and drive alignment across teams in a remote-first environment.
• High ownership, accountability, and adaptability; ability to navigate ambiguity and elevate systems and teams.

Responsabilités

• Shape product security strategy across major products and platforms.
• Lead cross-functional security programs spanning multiple teams and quarters.
• Automate vulnerability detection, triage, and remediation to shorten time-to-fix.
• Evolve security assurance programs for pentests, assessments, bug bounty, and red-team activities.
• Champion secure-by-default tooling and integrate security tools into CI/CD workflows.
• Support compliance efforts with SOC 2, ISO 27001, and related frameworks to drive durable controls.
• Influence senior leaders and mentor other security engineers across the org.
• Track emerging threats and translate risk trends into concrete product and control changes.

Connaissances

Software security leadership

Secure architecture

Secure SDLC

AI SDLC

Vulnerability management

Cloud-native security

Kubernetes security

SOC 2 ISO27001

Automation scripting

Stakeholder influence

Remote collaboration

Description du poste

Chainguard, the trusted source for open source, is seeking a Principal Product Security Engineer in a remote-first capacity. You will set product security direction, lead large-scale initiatives, and embed security by design across major products and platforms while partnering with engineering and product leadership to deliver secure, compliant, and production-ready software.

You will influence senior stakeholders, mentor security engineers, and stay ahead of evolving threats and supply-chain