Staff Product Security Engineer — Secure CI/CD & SBOMs (Remote)

Chainguard; United States; Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Remote-first culture

Job summary

Chainguard seeks a deeply technical engineer who cares about shipping secure software. You’ll be embedded in the pipeline, not a gate at the end, and will proactively identify emerging customer security needs and build solutions.

You will build and harden secure CI/CD pipelines, implement supply chain controls like signed artifacts and SBOMs, and lead threat modeling for Kubernetes workloads across GCP and AWS. Chainguard embraces a remote-first culture and serves Fortune 500 enterprises.

Qualifications

• 8+ years in software or security engineering with meaningful hands-on security responsibility.
• Strong proficiency in Go or Python, and deep Kubernetes experience in production.
• Practical expertise with GCP/AWS and CI/CD pipeline security.

Responsibilities

• Build and harden secure CI/CD pipelines with automatic security gates.
• Implement software supply chain security controls: signed artifacts, SBOMs, provenance attestation.
• Lead security architecture reviews and threat models for Kubernetes workloads on GCP and AWS.

Skills

Go

Python

Kubernetes experience

Tools

Kubernetes

GCP

AWS

CI/CD pipelines

Job description

Chainguard seeks a deeply technical engineer who cares about shipping secure software. You’ll be embedded in the pipeline, not a gate at the end, and will proactively identify emerging customer security needs and build solutions.

You will build and harden secure CI/CD pipelines, implement supply chain controls like signed artifacts and SBOMs, and lead threat modeling for Kubernetes workloads across GCP and AWS. Chainguard embraces a remote-first culture and serves Fortune 500 enterprises.