Senior Product Security Engineer

📋 Description

• Build and maintain secure CI/CD pipelines with security gates
• Capture risk exposure of Chainguard's products automatically
• Enforce software supply chain security controls: SBOMs, provenance
• Proactively identify customer security needs and deliver solutions
• Lead security architecture reviews for Kubernetes workloads on GCP/AWS
• Harden container images, cluster configurations, and cloud IAM postures

🎯 Requirements

• 7+ years in software or security engineering
• Strong Go or Python production code skills
• Deep Kubernetes production experience (RBAC, policies)
• Practical GCP and/or AWS IAM, workload identity, secrets mgmt
• Proven track record securing CI/CD pipelines (GitHub Actions, Cloud Build, Tekton)
• Fluency with container security (image scanning, distroless, runtime)
• Experience with software supply chain tooling (Sigstore, SLSA, SBOM)

🎁 Benefits

• Flexible remote-first culture with team meetups and coworking stipend
• Equity options with 10-year exercise window
• 100% covered health, vision, and dental insurance for you and dependents
• Infinite flexible time off
• 18 weeks paid parental leave for birthing parents; 12 weeks for non-birthing