Principal Product Security Engineer

Chainguard

. Set product security direction across major products and platforms .

Posted 10/23/2026full-timeRemote • United States, Canada, United KingdomLead💰 $229,000 - $258,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in product security direction, secure architecture, and risk management across cloud-native systems. Proficient in automating security workflows and ensuring compliance with SOC 2, ISO 27001, and NIST standards.

Highest-signal resume keywords

10+ Years In Software SecuritySecure Architecture ExpertiseRisk Management ProgramsAutomation In Go, Python, ShellSOC 2 And ISO 27001 Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure SDLCVulnerability ManagementCloud-Native SecurityStatic/Dynamic AnalysisContainersKubernetesAI SDLCRed-TeamingSoftware Supply Chain SecurityPolicy-As-Code

Soft Skills

Clear CommunicationInfluencing StakeholdersMentoringOwnershipAdaptability

Tools & Technologies

CI/CDAutomation ToolsIaC ScannersSTIGsCIS Baselines

Industry Keywords

NISTNIS2SLSABug Bounty ProgramsPentesting

Tech Stack

Tools & technologies

CloudDistributed SystemsKubernetesOpen SourcePythonSDLCGo

About the role

Key responsibilities & impact

Set product security direction across major products and platforms
Lead multi-quarter, cross-functional security initiatives that materially reduce risk
Embed security by design into roadmaps and day-to-day engineering work
Define and evolve security guardrails for AI-assisted development across design, coding, testing, review, deployment, and operations
Own cross-functional secure SDLC and vulnerability reduction programs spanning multiple teams and quarters
Build automation for vulnerability detection, triage, and remediation, including STIGs/CIS baselines and policy-as-code
Improve pentest, vulnerability assessment, bug bounty, and red-team programs
Guide integration of static/dynamic analysis, dependency and license checks, and IaC scanners into CI/CD
Support SOC 2, ISO 27001, NIST, and NIS2 compliance through durable, automation-friendly controls
Advise engineering and product leaders on risk framing and trade-offs
Mentor Product Security Engineers
Track emerging threats and supply-chain risks and translate them into changes to controls, tooling, and product direction
Work directly with engineering and product leadership with high autonomy

Requirements

What you’ll need

10+ years in software, product, or application security, with ownership of complex products or platforms
Deep expertise in secure architecture and system design for cloud-native or distributed systems
Knowledge of modern authorization/authentication and defense-in-depth patterns
Experience driving organization-level risk management and security programs, including secure SDLC, AI SDLC, and vulnerability management
Hands-on familiarity with containers, Kubernetes, public cloud, and associated security controls
Experience with SOC 2, ISO 27001, and SLSA compliance frameworks
Ability to automate security workflows in Go, Python, Shell, or another language and integrate them into CI/CD
Ability to influence senior stakeholders and drive cross-team alignment through clear, concise communication in a remote-first environment
Ownership, accountability, and adaptability
Software supply chain security experience, including SBOMs, SLSA, provenance, signing, and build system hardening (nice to have)
Red-teaming or offensive security experience and/or open source software development in security-sensitive projects (nice to have)
Public speaking or writing on security topics and participation in industry communities or standards (nice to have)
Prior experience in early-stage or high-growth companies (nice to have)

Benefits

Comp & perks

Work remotely with team meetup opportunities
Bi-annual destination summits
Monthly stipend for coworking spaces, phone and internet costs
Stock options upon hire and promotion
Participation in secondary offerings
10 years to exercise stock options
100% covered health, vision and dental insurance premiums for employee and dependents
Flexible time off
18 weeks paid parental leave for birthing parents
12 weeks paid parental leave for non-birthing parents
Equal opportunity employer