Principal Product Security Engineer (Remote • Equity)

Chainguard; United States; Remote; USD 229,000 - 258,000; Full time

Benefits offered by this job

Remote-first culture

Stock options

100% health insurance

Paid parental leave

Coworking stipend

Flexible time off

Job summary

Chainguard is seeking a Principal Product Security Engineer to shape security across major products, embedding security by design and driving cross-functional initiatives. You’ll lead initiatives to reduce risk, automate vulnerability detection, and evolve assurance programs within a remote-first, security‑conscious culture.

You will mentor engineers, influence senior leaders, and guide secure tooling adoption across CI/CD while advancing compliance with SOC 2, ISO 27001, and NIST standards.

Qualifications

• 10+ years in software security with ownership of complex products.
• Experience driving org-level risk management and security programs (secure SDLC, AI SDLC, vulnerability management) from design through rollout.
• Strong hands-on familiarity with cloud-native environments (containers, Kubernetes, public cloud) and associated security controls.
• Experience with security compliance frameworks (SOC 2, ISO 27001, SLSA) and translating controls into practical engineering work.
• Ability to automate security workflows in at least one language (e.g., Go, Python, Shell) and integrate them into CI/CD.
• Proven ability to influence senior stakeholders and drive alignment across teams through clear, concise communication in a remote-first environment.
• High bar for ownership, accountability, and adaptability — you anticipate risks, navigate ambiguity, and leave systems and teams better than you found them.

Responsibilities

• Shape product security strategy across major products and platforms.
• Lead cross-functional programs (secure SDLC, vulnerability management) that span multiple teams and quarters.
• Automate vulnerability detection, triage, and remediation (including STIGs/CIS baselines and policy-as-code).
• Evolve security assurance programs including pentests, vulnerability assessments, bug bounty, and red-team activity.
• Champion secure-by-default tooling and integrate security tools into CI/CD with developer workflows.
• Support compliance in frameworks like SOC 2, ISO 27001, NIST to drive durable controls.
• Influence senior leaders and mentor engineers; translate threat landscape into concrete changes.

Skills

Security leadership

Secure SDLC

Cloud security

CI/CD automation

Stakeholder influence

Threat modeling

SBOMs

Open source security

Red team knowledge

Policy-as-code

Tools

Kubernetes

Cloud platforms

Static analysis

Dynamic analysis

IaC scanners

CI/CD tooling

Job description

Chainguard is seeking a Principal Product Security Engineer to shape security across major products, embedding security by design and driving cross-functional initiatives. You’ll lead initiatives to reduce risk, automate vulnerability detection, and evolve assurance programs within a remote-first, security‑conscious culture.

You will mentor engineers, influence senior leaders, and guide secure tooling adoption across CI/CD while advancing compliance with SOC 2, ISO 27001, and NIST standards.