SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 205,000 - 231,000 / annual
Chainguard is a venture-backed software supply-chain security company that delivers hardened, secure, production-ready builds of open-source software. The company serves Fortune 500 enterprises and global leaders including OpenAI, Snap, Snowflake, and HPE.
As a Staff Product Security Engineer, you will be a hands-on technical leader responsible for elevating Chainguard's security posture across products and the engineering organization. This is a high-impact, independent role that influences multiple teams without direct authority.
Key responsibilities include:
- Drive product security strategy and execution across multiple products, platforms, and engineering teams
- Lead the evolution of Chainguard's secure SDLC with emphasis on AI SDLC and risks of AI-assisted development
- Define and implement practical guardrails for AI use in engineering, including secure patterns, policy, workflow controls, and automation
- Partner with Engineering to embed security controls into the full development lifecycle (architecture, design, coding, testing, code review, deployment, operations)
- Lead secure architecture reviews and threat-modeling efforts for high-impact systems
- Own cross-functional initiatives such as vulnerability reduction, security automation, and secure-by-default improvements
- Automate vulnerability detection, triage, and remediation using policy-as-code and cloud/container security controls
- Champion adoption of security tooling (SAST, DAST, SCA, IaC scanners, AI-related controls) within developer workflows and CI/CD
- Improve security assurance activities (penetration tests, vulnerability assessments, bug bounty, red-team exercises) to drive lasting improvements
- Translate compliance frameworks (SOC 2, ISO 27001, NIST, SLSA) into durable, automation-friendly engineering controls
- Stay current on emerging threats, software supply-chain risks, and AI security developments
- Influence senior stakeholders through clear risk framing and pragmatic recommendations
- Mentor Product Security Engineers and raise the security bar across the organization
Requirements:
- 7+ years of experience in software, product, application, or cloud security
- Experience driving security programs from design through rollout (secure SDLC, AI SDLC, vulnerability management, platform hardening, security automation)
- Practical understanding of how engineers build and ship software; ability to translate security requirements into adoptable workflows
- Strong hands-on familiarity with containers, Kubernetes, public cloud, and associated security controls
- Experience with security compliance frameworks (SOC 2, ISO 27001, NIST, SLSA) and ability to translate controls into practical engineering work
- Ability to automate security workflows in at least one language (Go, Python, Shell) and integrate into CI/CD
- Proven ability to influence and align teams through clear communication in a remote-first environment
- Strong ownership, accountability, and adaptability; ability to anticipate risks and navigate ambiguity
Nice-to-have:
- Experience designing or operating an AI SDLC, AI security program, or governance model for AI-assisted development
- Background in software supply-chain security (SBOMs, provenance, signing, build-system hardening)
- Experience with red-teaming, offensive security, or security-sensitive open-source development
- Experience with SAST, DAST, SCA, IaC scanning, policy-as-code, or related security tooling
- Public speaking or writing on security topics; participation in industry communities and standards bodies
- Experience in early-stage or high-growth companies where security moves at product speed
About Chainguard
AI / Data / Infrastructure; Legal / Compliance / Risk — software supply-chain security and trusted container images.
