Principal Product Security Engineer
C
ChainguardProduct security
United Kingdom - RemoteFull-TimePrincipal
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 10+ years in software, product, or application security
- Required Skills
- PythonKubernetesGoCI/CD
Requirements
- Have 10+ years of experience in software, product, or application security.
- Have owned complex products or platforms.
- Bring deep expertise in secure architecture and system design for cloud-native or distributed systems.
- Understand modern authorization and authentication and defense-in-depth patterns.
- Have experience driving organization-level risk management and security programs, including secure SDLC, AI SDLC, and vulnerability management, from design through rollout.
- Have hands-on familiarity with containers, Kubernetes, public cloud, and associated security controls.
- Have experience with security compliance frameworks such as SOC 2, ISO 27001, or SLSA, and translating controls into practical engineering work.
- Be able to automate security workflows in at least one language, such as Go, Python, or Shell, and integrate them into CI/CD.
- Be able to influence senior stakeholders and align teams through clear, concise communication in a remote-first environment.
- Demonstrate ownership, accountability, and adaptability, including anticipating risks and navigating ambiguity.
Responsibilities
- Define and evolve security guardrails for AI-assisted development across design, coding, testing, review, deployment, and operations.
- Own cross-functional security programs, including secure SDLC improvements and vulnerability reduction, across multiple teams and quarters.
- Partner with engineering to automate vulnerability detection, triage, and remediation, including STIGs/CIS baselines and policy-as-code.
- Improve pentests, vulnerability assessments, bug bounty programs, and red-team activity so findings lead to lasting engineering and process changes.
- Guide adoption and integration of static and dynamic analysis, dependency and license checks, and IaC scanners into CI/CD.
- Help maintain and apply SOC 2, ISO 27001, NIST, and NIS2 frameworks to product and platform controls.
- Present risk framing and trade-off options to engineering and product leaders, and mentor Product Security Engineers.
- Track emerging threats and supply-chain risks and translate them into changes to controls, tooling, and product direction.
View Full Description & ApplyYou'll be redirected to the employer's site
