Senior Security Engineer (Infrastructure)

Chainguard; New York (NY); Remote; USD 180,000 - 230,000; Full time

Benefits offered by this job

Equity/stock options

Unlimited PTO

Remote work with flexible coworking

Home office stipend

Health/dental/vision insurance

Job summary

Chainguard is seeking a Senior Security Engineer to design and secure our multi-cloud environment that powers our product. You’ll collaborate with product engineering to embed security into architecture, tooling, and CI/CD pipelines.

You’ll lead threat modeling, incident response, and disaster recovery exercises, working with IAM and DevOps to enforce secure identity, access controls, and resilient infrastructure across GCP, AWS, and Azure.

Qualifications

• Security-focused cloud architecture and risk assessment.
• Experience with multi-cloud environments (GCP/AWS/Azure).
• Experience embedding security into development teams and processes.

Responsibilities

• Engineer and secure multi-cloud environments.
• Embed security into product architecture with engineering teams.
• Lead disaster recovery exercises.
• Develop automation, pipelines, guardrails using Terraform/IaC and Kubernetes.
• Collaborate with IAM to enforce secure identity and access strategies.

Skills

Cloud security

DevOps mindset

Terraform/IaC

Kubernetes (GKE)

Identity and access management

Incident response

Tools

Terraform

Kubernetes (GKE)

CI/CD pipelines

Azure

AWS

GCP

Job description

• We’re looking for a Senior Security Engineer to engineer and secure our multi-cloud environment, the same cloud infrastructure that powers our product
• This is a cloud-native, AI-obsessed company, and our cloud is the platform our product runs on
• How we design, harden, and evolve it directly shapes what we can build and how fast we can build it safely
• As open source software increasingly feeds AI agents as well as human engineers, securing that supply chain end-to-end is core to our mission
• You’ll formally report to the Sr Director of Cyber Resiliency and spend time embedded in project pods building alongside our product engineering partners
• We’re a late-stage startup, which means priorities, tooling, and scope can shift quickly
• Engineer and maintain cloud environments built to be secure, resilient, and optimized for performance
• Partner hands-on with internal engineering teams to embed security into the architecture and tooling developers use every day
• Work closely with our IAM counterparts to design and enforce secure identity and access strategies across all cloud environments
• Harden cloud platforms against emerging threats while keeping them resilient and highly available
• Lead cloud-centric disaster recovery exercises
• Bring a DevOps mindset by building automation, pipelines, and guardrails using Terraform/IaC and Kubernetes
• Help secure the infrastructure behind AI-driven pipelines and agentic workflows as they become a growing consumer of the software supply chain
• Act as a trusted advisor and collaborator to product engineering translating requirements into secure practical infrastructure that other teams will rapidly adopt
• Adapt architecture and priorities as the company scales, reworking plans as needs, tooling, or team structure shift
• Assist during relevant incident response investigations

Benefits

• Equity/stock options
• Unlimited PTO
• Remote work with flexible coworking and team meetup opportunities
• Home office and internet stipend
• 100% health/dental/vision insurance coverage for you and your family

Strong, hands-on GCP or AWS engineering experience requiredA track record of designing systems that are secure, resilient, and built to accelerate engineering velocityOutstanding interpersonal and communication skillsSolid DevOps background: comfortable using Terraform/IaC, Kubernetes (GKE), and CI/CD pipelinesExperience with Azure also a plusComfort with ambiguity and rapid change: prior experience at a fast-moving or late-stage startup is a strong plusWe’re building the best team in technology and are focused on hiring “Chainguardians” with unique backgrounds, perspectives, and experiences