Staff Product Security Engineer
Chainguard1 day ago
Base Salary
$205k - $231k/yr
Responsibilities
- Design, build, and maintain secure CI/CD pipelines with security gates that identify issues before production.
- Automatically capture and assess risk exposure across Chainguard products.
- Implement software supply chain controls including signed artifacts, SBOMs, and provenance attestations.
- Lead security architecture reviews and threat modeling for Kubernetes-based workloads on GCP and AWS.
- Harden container images, Kubernetes clusters, cloud IAM postures, and product attack surfaces.
- Define and drive adoption of pod security, network policy, workload identity, and secrets management standards.
- Identify emerging customer security needs and build solutions to address them.
Requirements
- Require 8+ years of software engineering, security engineering, or combined experience with meaningful hands-on security responsibility.
- Require strong proficiency in Go or Python and the ability to write, review, and debug production-quality code.
- Require deep production Kubernetes experience, including cluster hardening, RBAC, network policies, and admission controllers.
- Require practical GCP and/or AWS experience with IAM, workload identity, secrets management, and security services.
- Require experience designing and securing CI/CD pipelines using tools such as GitHub Actions, Cloud Build, or Tekton.
- Require hands-on container security experience including image scanning, minimal base images, and runtime security.
- Require experience with software supply chain security tooling and frameworks such as Sigstore, SLSA, and SBOM generation.
- Require understanding of OWASP, NIST, and cloud security frameworks.
- Preferred qualifications include familiarity with Chainguard Images or other hardened container image ecosystems.
- Preferred qualifications include experience with OPA, Kyverno, or Conftest; open source security contributions; and security research, bug bounty, CTF, or penetration testing experience.
Benefits
- Remote-first work with team meetups, bi-annual destination summits, and a monthly coworking, phone, and internet stipend.
- Stock options upon hire and promotion, participation in secondary offerings, and a 10-year exercise period.
- Company-paid health, vision, and dental insurance premiums for employees and dependents.
- Flexible paid time off.
- Paid parental leave of 18 weeks for birthing parents and 12 weeks for non-birthing parents.
Tech Stack
Categories
About Chainguard
Chainguard provides secure, hardened container images and production-ready builds of open source software for enterprises and developers, typically sold via subscriptions and support. Its offerings include Chainguard Images and tools for software supply chain security; the company also maintains Wolfi, a container-focused Linux distribution. Founded in 2021 and headquartered in Kirkland, WA, Chainguard’s customers include organizations such as OpenAI, Snowflake, and Hewlett Packard Enterprise.