Senior Product Security Engineer
New
C
ChainguardProduct security
United States - RemoteFull-TimeSenior
SalaryBase Salary Range $157,000 — $184,000 USD
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in software engineering, security engineering, or a combined role with meaningful hands-on security responsibility throughout.
- Required Skills
- AWSPythonGCPKubernetesGoCI/CDGitHub Actions
Requirements
- Have 5+ years of experience in software engineering, security engineering, or a combined role with meaningful hands-on security responsibility.
- Be proficient in Go or Python and able to write, review, and debug production-quality code.
- Have hands-on production Kubernetes experience, including cluster hardening, RBAC, network policies, and admission controllers.
- Have practical expertise with GCP and/or AWS, including IAM, workload identity, secrets management, and security services.
- Have a track record designing and securing CI/CD pipelines using GitHub Actions, Cloud Build, Tekton, or similar.
- Have container security experience, including image scanning, distroless or minimal base images, and runtime security.
- Have experience with software supply chain security tooling and frameworks, including Sigstore, SLSA, and SBOM generation.
- Understand OWASP, NIST, and cloud security frameworks and how to apply them pragmatically.
Responsibilities
- Design, build, and maintain secure CI/CD pipelines with security gates.
- Systematically and automatically capture risk exposure across Chainguard products.
- Implement software supply chain security controls, including signed artifacts, SBOMs, and provenance attestation.
- Identify emerging customer security needs and build solutions to address them.
- Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
- Harden container images, Kubernetes cluster configurations, and cloud IAM postures.
- Define and drive adoption of baseline security standards, including pod security standards, network policies, workload identity, and secrets management.
View Full Description & ApplyYou'll be redirected to the employer's site
