Staff Product Security Engineer

Overview

Chainguard is hiring a Staff Product Security Engineer to build and harden secure pipelines and cloud-native products. In this role, you will be embedded directly into the engineering process to design and maintain secure CI/CD pipelines, capture risk exposure automatically, and implement supply chain security controls such as signed artifacts, software bills of materials, and provenance attestation. You will also lead security architecture reviews, perform threat modeling for Kubernetes-based workloads on GCP and AWS, and minimize the attack surface across the product stack.

Requirements

Applicants must have eight or more years of experience in software engineering, security engineering, or a combined role with hands-on security responsibilities. The position requires strong proficiency in Go or Python to write, review, and debug production-quality code, along with deep practical experience with production Kubernetes, GCP and/or AWS cloud environments, and secure CI/CD pipelines. Candidates