Senior Security Analyst (Governance and Trust)

Chainguard
United States
Workplace: RemoteFull timeUSD 110,000 - 130,000 annuallyFunction: CybersecuritySkills: ["Risk-based judgment","Cross-functional collaboration","Clear communication","Low-ego teamwork","Building structure in ambiguity"]

Build and operate continuous monitoring and continuous authorization capabilities for public-sector and federal customers, translating requirements like CMMC 2.0 and FedRAMP into practical controls, evidence pipelines, and risk-based recommendations. Partner with Engineering and Product Security to connect requirements to cloud-native systems, support Facility Clearance pursuit, and automate governance workflows using scalable systems and policy-as-code.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Chainguard
Chainguard
2 days ago

Senior Security Analyst (Governance and Trust)

âś“ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Build and operate continuous monitoring and continuous authorization capabilities for public-sector and federal customers, translating requirements like CMMC 2.0 and FedRAMP into practical controls, evidence pipelines, and risk-based recommendations. Partner with Engineering and Product Security to connect requirements to cloud-native systems, support Facility Clearance pursuit, and automate governance workflows using scalable systems and policy-as-code.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design and operate continuous monitoring and continuous authorization capabilities portable across public-sector frameworks.
  • •Translate CMMC 2.0, FedRAMP 20x, and related requirements into practical controls, evidence pipelines, and decision-ready recommendations.
  • •Partner with Engineering and Product Security to connect federal requirements to how Chainguard’s cloud-native systems and Athena work.
  • •Support Facility Clearance (FCL) pursuit and provide internal governance for it.
  • •Build scalable systems for control ownership, evidence collection, remediation tracking, exceptions, and reporting, favoring automation and policy-as-code.

Pay and Benefits

Salary: USD 110,000 - 130,000 annually
Equity and Bonus:Equity
Perks:Remote WorkHealth InsuranceVisionDentalEquityPaid LeaveParental Leave

Key Requirements

  • •Hands-on technical depth to engage with cloud-native architecture, SaaS product design, and software development practices—not just control descriptions.
  • •Meaningful firsthand experience operating in a federal, defense, or intelligence environment in a technical or operational capacity with real decision authority.
  • •Practical working knowledge of CMMC Level 2 and at least one of FedRAMP, RMF, or NIST 800-53.
  • •Risk-based judgment to distinguish between assessor-satisfied controls and controls that actually reduce risk.
  • •Clear written and verbal communication across technical, non-technical, and customer-facing audiences.
Experience:FederalDefenseSecurity operations
Skills:Risk-based judgmentCross-functional collaborationClear communicationLow-ego teamworkBuilding structure in ambiguity
Tech Stack:CMMC 2.0FedRAMP 20xRMFNIST 800-53Continuous monitoringContinuous authorizationPolicy-as-codeGitOpsSaaSSOCISSM/ISSOSBOMsArtifact signingProvenanceSLSASecure CI/CD

Company Brief

Chainguard
Builds software supply chain security solutions for containerized and Kubernetes-native environments, offering tools for secure builds, attestations, vulnerability scanning, and policy enforcement to help organizations deploy trustworthy software at scale.
Industry: Cybersecurity
Company Size: Medium (51 to 250 employees)
Growth: Scaleup
Funding: Series C
Headquarters: Seattle, United States
Founded: 2020
WebsiteLinkedIn