Staff Product Security Engineer (Fully Remote)

Chainguard; United States; Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Remote-first culture

Job summary

Chainguard seeks a deeply technical engineer who cares about shipping secure software. You’ll be embedded in the pipeline, not a gate at the end, and will proactively identify emerging customer security needs and build solutions.

You will build and harden secure CI/CD pipelines, implement supply chain controls like signed artifacts and SBOMs, and lead threat modeling for Kubernetes workloads across GCP and AWS. Chainguard embraces a remote-first culture and serves Fortune 500 enterprises.

Qualifications

• 8+ years in software or security engineering with meaningful hands-on security responsibility.
• Strong proficiency in Go or Python, and deep Kubernetes experience in production.
• Practical expertise with GCP/AWS and CI/CD pipeline security.

Responsibilities

• Build and harden secure CI/CD pipelines with automatic security gates.
• Implement software supply chain security controls: signed artifacts, SBOMs, provenance attestation.
• Lead security architecture reviews and threat models for Kubernetes workloads on GCP and AWS.

Skills

Go

Python

Kubernetes experience

Tools

Kubernetes

GCP

AWS

CI/CD pipelines

Job description

• You are a deeply technical engineer who cares about shipping secure software.
• You will be embedded in the pipeline, not a gate at the end.
• You will proactively identify emerging customer security needs and build solutions.

Responsibilities:

• Build and harden secure CI/CD pipelines with automatic security gates.
• Implement software supply chain security controls: signed artifacts, SBOMs, provenance attestation.
• Lead security architecture reviews and threat models for Kubernetes workloads on GCP and AWS.

Requirements:

• 8+ years in software or security engineering with meaningful hands-on security responsibility.
• Strong proficiency in Go or Python, and deep Kubernetes experience in production.
• Practical expertise with GCP/AWS and CI/CD pipeline security.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software to help organizations build faster, stay compliant, and eliminate risk. They are a venture-backed company with a remote-first culture and serve Fortune 500 enterprises.