Senior Product Security Engineer

📋 Description

• Embed in CI/CD pipelines to ensure secure software is shipped.
• Design, build, and maintain secure CI/CD pipelines with security gates.
• Capture risk exposure of Chainguard products systematically.
• Implement supply chain security: signed artifacts, SBOMs, provenance (SLSA, Sigstore).
• Lead security architecture reviews for Kubernetes workloads on GCP and AWS.
• Harden container images, Kubernetes configs, and cloud IAM postures.

🎯 Requirements

• 5+ years in software or security engineering with hands-on security.
• Go or Python production coding proficiency.
• Kubernetes production experience (RBAC, network policies, hardening).
• GCP and/or AWS IAM, workload identity, secrets management.
• CI/CD security design (GitHub Actions, Cloud Build, Tekton).
• Container security: image scanning, minimal base images, SBOM/Sigstore/SLSA.

🎁 Benefits

• Flexible remote-first culture with meetups and coworking stipend.
• Stock options on hire and promotion; 10 years to exercise.
• 100% covered health, vision and dental insurance.
• ∞ Flexible time off to recharge.
• 18 weeks paid parental leave (12 weeks for non-birthing).