Remote Senior Security Analyst, Governance & Trust

Chainguard; Northern (KY); Hybrid; USD 110,000 - 130,000; Full time

Benefits offered by this job

Remote-friendly culture

Stock options

100% Covered Health Insurance

Generous parental leave

Annual summits

Job summary

Chainguard is seeking a Senior Security Analyst (Governance and Trust) to design and run a portable continuous monitoring and authorization program for federal and defense customers. You will translate standards into practical controls, build evidence pipelines, and partner with Engineering and Product Security to connect requirements to Chainguard’s cloud-native systems.

You’ll collaborate across Security, Federal strategy, Go-to-Market, Product, Engineering, and Legal to scale governance,

Qualifications

• Demonstrated deep technical capability with cloud-native systems and SaaS products.
• Experience operating in federal/defense environments with real decision authority.
• Knowledge of FedRAMP, RMF, NIST 800-53, and CMMC 2.0 in practice, not theory.

Responsibilities

• Design and operate portable continuous monitoring and authorization across frameworks (FedRAMP, IRAP, C5).
• Translate federal requirements into practical controls and evidence pipelines.
• Collaborate with Engineering and Product Security to align Chainguard’s cloud-native systems with regulatory requirements.
• Support facilities clearance efforts and internal governance processes.
• Build scalable control ownership, evidence collection, remediation tracking, and reporting mechanisms.
• Coordinate across Security, Federal strategy, GTM, Product, Engineering, and Legal to move programs forward.

Skills

Cloud-native architecture

SaaS design

Security operations

Communication skills

Tools

GitOps

Automated evidence collection

CMMC tooling

Job description

Chainguard is seeking a Senior Security Analyst (Governance and Trust) to design and run a portable continuous monitoring and authorization program for federal and defense customers. You will translate standards into practical controls, build evidence pipelines, and partner with Engineering and Product Security to connect requirements to Chainguard’s cloud-native systems.

You’ll collaborate across Security, Federal strategy, Go-to-Market, Product, Engineering, and Legal to scale governance,