SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 157,000 - 184,000 / annual
Chainguard is a venture-backed software supply-chain security company delivering hardened, secure, production-ready builds of open source software. The company serves Fortune 500 enterprises and global leaders including OpenAI, Snap Inc., and Snowflake.
As a Senior Product Security Engineer, you will be a deeply technical engineer embedded in Chainguard's product development process, not a gate at the end. You will design and build secure CI/CD pipelines with security gates that catch issues before production, systematically capture risk exposure across Chainguard's products, and implement software supply chain security controls including signed artifacts, SBOMs, and provenance attestation (SLSA, Sigstore/Cosign).
You will lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS. You'll harden container images, Kubernetes cluster configurations, and cloud IAM postures to minimize attack surface. You will define and drive adoption of baseline security standards including pod security standards, network policies, workload identity, and secrets management. You'll also proactively identify emerging customer security needs and build solutions to address them.
This is a fully remote role with a remote-first culture, team meetup opportunities, bi-annual destination summits, and monthly stipends for coworking spaces and connectivity. The company offers 100% covered health insurance, flexible time off, 18 weeks paid parental leave, and stock options with a 10-year exercise window.
REQUIREMENTS:
- 5+ years in software engineering, security engineering, or combined role with meaningful hands-on security responsibility
- Strong proficiency in Go or Python with ability to write, review, and debug production-quality code
- Deep, hands-on experience with Kubernetes in production (cluster hardening, RBAC, network policies, admission controllers)
- Practical expertise with GCP and/or AWS (IAM, workload identity, secrets management, security services)
- Proven track record designing and securing CI/CD pipelines (GitHub Actions, Cloud Build, Tekton, or similar)
- Fluency with container security (image scanning, distroless/minimal base images, runtime security)
- Experience with software supply chain security tooling and frameworks (Sigstore, SLSA, SBOM generation)
- Solid understanding of OWASP, NIST, and cloud security frameworks and how to apply them pragmatically
NICE TO HAVE:
- Familiarity with Chainguard Images or other minimal/hardened container base image ecosystems
- Experience with policy-as-code tools (OPA, Kyverno, Conftest)
- Contributions to open source security projects
- Background in security research or offensive security (bug bounty, CTF, penetration testing)
About Chainguard
AI / Data / Infrastructure; Legal / Compliance / Risk — software supply-chain security and trusted container images.
