Senior Software Engineer (Athena)

Chainguard; New York (NY); Remote; USD 150,000 - 230,000; Full time

Benefits offered by this job

Equity/stock options

Unlimited PTO

Remote work with flexible coworking

Home office and internet stipend

100% health/dental/vision insurance

Job summary

Chainguard is building Athena, the system that makes open source supply chain security possible at enterprise scale. You will build and maintain core Go-based backend components on GCP, including onboarding flows, data ingestion, and entitlement logic.

Take ownership of features from design through production with testing and observability, review code, contribute infrastructure-as-code with Terraform, and help shape scalable architectural patterns across the team.

Qualifications

• Experience building backend services in Go for enterprise-scale systems.
• Strong experience with Google Cloud Platform and Terraform.
• Familiar with on-call rotations and incident response.
• Ability to handle unstructured data and produce validated outputs.
• Experience with customer-facing APIs or workflows is a plus.
• Security vulnerability domain knowledge is a plus.

Responsibilities

• Build and maintain core backend components in Go on GCP.
• Own features from design through production with testing and observability.
• Review code and raise engineering bar.
• Operate agentic workflows that automate multi-step tasks across production systems.
• Participate in on-call rotation and incident postmortems.
• Collaborate to implement scalable architectural patterns.

Skills

Go

GCP

Terraform

Backend engineering

On-call

Unstructured data

APIs/workflows

Agentic AI workflows

Security domain knowledge

System architecture

Tools

GCP

Terraform

Job description

• Chainguard secures the open source supply chain, the infrastructure underneath the majority of the software running in production today


• This team is building Athena, the system that makes that possible at enterprise scale (Read more about Athena here)


• We process vulnerability reports from enterprise customers, validate and deduplicate findings, and route clean signals to remediation


• We are building the clearing house that sits between enterprise customers and our remediation engine


• Build and maintain core components of the clearing house in Go on GCP including customer onboarding flows, entitlement logic, and data ingestion pipelines


• Take on ownership of ambiguous problems and specific features or subsystems, driving them from design through production with appropriate testing and observability


• Work closely with staff and principal engineers to implement architectural patterns that scale


• Write backend systems that handle unstructured data inputs from enterprise customers and produce structured, validated outputs


• Design, implement, and operate reliable agentic workflows that automate complex, multi-step tasks across production systems


• Participate in on-call rotation and contribute to incident response and postmortems


• Become a go-to engineer for one or more core subsystems, leading multi-engineer efforts over a multi-month horizon


• Review code, give direct feedback, and raise the team’s engineering bar


• Contribute infrastructure-as-code and operational tooling using Terraform and GCP-native tooling

Benefits

• Equity/stock options


• Unlimited PTO


• Remote work with flexible coworking and team meetup opportunities


• Home office and internet stipend


• 100% health/dental/vision insurance coverage for you and your family

• Experience working in a team that prioritizes operational excellence: monitoring, alerting, graceful degradation


• Security or infrastructure domain knowledge


• Strong Go engineering skills; GCP and Terraform experience


• Solid backend engineering foundation you’ve shipped and maintained production systems


• Able to scope and drive features independently with minimal oversight


• You can navigate unstructured data problems (parsing, validating, deduplicating) with a methodical, analytical approach


• Experience with customer-facing APIs or workflow systems is a plus


• Experience with Agentic AI workflows


• Experience in security vulnerability domain, coordinated disclosure process, or CVE publication