Principal Product Security Engineer

Sets product security direction across Chainguard's products and platforms as a principal engineer, working directly with engineering and product leadership at the software supply chain security company. The engineer defines guardrails for AI-assisted development across the lifecycle, runs multi-quarter programs such as secure SDLC work and vulnerability reduction, builds automated detection and remediation with STIG and CIS baselines and policy as code, and improves how pentests, bug bounty and red-team findings turn into lasting fixes.

The role needs ten years in software or application security, deep secure architecture skills for cloud-native systems, Kubernetes, SOC 2 or SLSA experience and automation in Go, Python or shell. Remote from the US, Canada or the UK.