Staff Product Security Engineer
Chainguard · United States - Remote
About the role
A hands-on staff product security engineer at Chainguard focused on making secure development the default, especially the AI SDLC: the policy, tooling and review practices that let engineers use AI coding tools safely. The engineer leads architecture reviews and threat modelling, drives vulnerability reduction and policy-as-code automation, brings SAST, DAST, dependency and IaC scanning into CI/CD, and turns SOC 2, ISO 27001, NIST and SLSA into engineering controls.
It asks for seven years in software, application or cloud security, experience running secure SDLC or similar programs, containers, Kubernetes and public cloud, and automation in Go, Python or shell. Remote from the US, UK or Canada.