Chainguard

1 month ago

Senior Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Embedded, deeply technical security engineer focused on shipping secure software. You’ll build and harden secure CI/CD pipelines, perform cloud-native security reviews, and reduce attack surface across Kubernetes-based workloads in GCP/AWS, while aligning with software supply chain security and industry frameworks.

Location: Canada

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Design, build, and maintain secure CI/CD pipelines with security gates that catch issues before they reach production.
•Systematically capture the risk exposure of Chainguard’s products in an automated way.
•Implement and enforce software supply chain security controls (signed artifacts, SBOMs, provenance attestation such as SLSA and Sigstore/Cosign).
•Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
•Harden container images, Kubernetes cluster configurations, and cloud IAM postures to minimise attack surface across the product stack.

Pay and Benefits

Equity and Bonus:Equity

Perks:Remote WorkHealth InsuranceEquityPaid LeaveParental Leave

Key Requirements

•5+ years in software engineering, security engineering, or a role with meaningful hands-on security responsibility.

Experience:5+ yearsOpen sourceSoftware securityCloud securityDevops

Skills:Problem-solvingCommunicationCollaboration

Languages:English

Tech Stack:GoPythonKubernetesGCPAWSGitHub ActionsCloud BuildTektonSigstoreCosignSBOMSLSAOWASPNIST

Company Brief

Chainguard

Builds software supply chain security solutions for containerized and Kubernetes-native environments, offering tools for secure builds, attestations, vulnerability scanning, and policy enforcement to help organizations deploy trustworthy software at scale.

Industry: Cybersecurity

Company Size: Medium (51 to 250 employees)

Growth: Scaleup

Funding: Series C

Headquarters: Seattle, United States

Founded: 2020

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Chainguard

1 month ago

Senior Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Canada

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Design, build, and maintain secure CI/CD pipelines with security gates that catch issues before they reach production.
•Systematically capture the risk exposure of Chainguard’s products in an automated way.
•Implement and enforce software supply chain security controls (signed artifacts, SBOMs, provenance attestation such as SLSA and Sigstore/Cosign).
•Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
•Harden container images, Kubernetes cluster configurations, and cloud IAM postures to minimise attack surface across the product stack.

Pay and Benefits

Equity and Bonus:Equity

Perks:Remote WorkHealth InsuranceEquityPaid LeaveParental Leave

Key Requirements

•5+ years in software engineering, security engineering, or a role with meaningful hands-on security responsibility.

Experience:5+ yearsOpen sourceSoftware securityCloud securityDevops

Skills:Problem-solvingCommunicationCollaboration

Languages:English

Tech Stack:GoPythonKubernetesGCPAWSGitHub ActionsCloud BuildTektonSigstoreCosignSBOMSLSAOWASPNIST

Company Brief

Chainguard

Industry: Cybersecurity

Company Size: Medium (51 to 250 employees)

Growth: Scaleup

Funding: Series C

Headquarters: Seattle, United States

Founded: 2020

Website LinkedIn