Staff Product Security Engineer

📋 Description

• You are a deeply technical engineer who cares about shipping secure software and embedding security
• Lead and own hard security problems as an individual contributor with technical leadership.
• Build and harden secure CI/CD pipelines with security gates before production.
• Capture and manage risk exposure for Chainguard products automatically.
• Define security standards and drive adoption across cloud-native workloads.
• Lead security reviews and threat modeling for Kubernetes workloads across cloud providers.

🎯 Requirements

• 7+ years in software/security engineering with hands-on security responsibility.
• Proficiency in Go or Python for production-grade code.
• Production Kubernetes experience (RBAC, network policies, etc.).
• Experience with GCP and/or AWS (IAM, workload identity, secrets management).
• Proven track record securing CI/CD pipelines (GitHub Actions, Cloud Build, Tekton).
• Fluency with container security (image scanning, minimal base images, runtime security).

🎁 Benefits

• Flexible & Remote-First Culture: work remotely with team meetups, summits, and stipends for
• Equity: stock options with extended exercise window (up to 10 years).
• Comprehensive health coverage for you and dependents.
• Infinity-style time off: flexible vacation policy.
• Paid parental leave: 18 weeks for birthing, 12 weeks for non-birthing parents.