Senior Vulnerability Management Engineer (Remote, Equity)

Doist; United States; Remote; USD 170,000 - 231,000; Full time

Benefits offered by this job

Remote-first culture

Stock options

100% Health Insurance

Generous parental leave

Coworking stipend

Job summary

Chainguard is seeking a Staff Vulnerability Management Engineer to lead the industry’s response to emerging vulnerabilities in open source software. You will own our vulnerabilities pipeline, coordinate disclosures, and work with regulators, maintainers, and customers in a remote-first environment.

You will guide cross-team efforts, shape policy with industry bodies, and represent Chainguard externally as a vision-driven senior contributor focusing on scalable, secure supply chains.

Qualifications

• 7+ years in software security or vulnerability disclosure management.
• Strong understanding of responsible disclosure.
• Experience automating pipelines to operate at large scale.
• Deep experience with open source communities.
• Experience coordinating with public sector or industry standards bodies.

Responsibilities

• Manage our vulnerability pipeline and weekly disclosures.
• Calibrate response processes to emerging trends.
• Coordinate CNAs and CVEs with upstream projects and maintainers.
• Coordinate embargoes with customers and internal/external teams.
• Lead industry direction and standardisation efforts.
• Represent Chainguard externally as the face of our security work.

Skills

security leadership

open source community

vulnerability disclosure

automation pipelines

public sector coordination

industry standards

Tools

Python

Java

JavaScript

Go

Job description

Chainguard is seeking a Staff Vulnerability Management Engineer to lead the industry’s response to emerging vulnerabilities in open source software. You will own our vulnerabilities pipeline, coordinate disclosures, and work with regulators, maintainers, and customers in a remote-first environment.

You will guide cross-team efforts, shape policy with industry bodies, and represent Chainguard externally as a vision-driven senior contributor focusing on scalable, secure supply chains.