Staff Product Security Engineer

Chainguard

. Drive product security strategy and execution across multiple products, platforms, and engineering teams .

Posted 10/23/2026full-timeRemote • United StatesLead💰 $205,000 - $231,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in driving product security strategy and execution, with a strong focus on secure SDLC, AI security, and vulnerability management. Proficient in automating security workflows and embedding security controls across engineering processes.

Highest-signal resume keywords

Secure SDLC ImplementationVulnerability ManagementAI Security Program DevelopmentSecurity Automation in Go, Python, or ShellSOC 2, ISO 27001, NIST Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability DetectionThreat ModelingSecurity AutomationPenetration TestingStatic AnalysisDynamic AnalysisIaC ScanningSecurity ToolingCloud Security ControlsContainer Security

Soft Skills

Clear CommunicationInfluencing StakeholdersMentoringOwnershipAdaptability

Tools & Technologies

KubernetesCI/CDPolicy-as-CodeSBOMsRed-Teaming Tools

Industry Keywords

Software Supply-Chain SecurityAI SDLCSecurity MaturityBug Bounty ProgramsHigh-Growth Company Experience

Tech Stack

Tools & technologies

CloudKubernetesPythonSDLCGo

About the role

Key responsibilities & impact

Drive product security strategy and execution across multiple products, platforms, and engineering teams
Lead the evolution of Chainguard’s secure SDLC, with emphasis on the AI SDLC and AI-assisted development risks
Define and implement guardrails for responsible AI use in engineering
Partner with Engineering to embed security controls across architecture, design, coding, testing, code review, deployment, and operations
Lead secure architecture reviews and threat-modeling efforts
Own vulnerability reduction, security automation, and secure-by-default engineering initiatives
Automate vulnerability detection, triage, and remediation, including policy-as-code and cloud or container security controls
Champion security tooling such as static and dynamic analysis, dependency and license checks, IaC scanners, and AI-related controls in developer workflows and CI/CD
Improve security assurance activities including penetration tests, vulnerability assessments, bug bounty programs, and red-team exercises
Translate SOC 2, ISO 27001, NIST, and SLSA into durable engineering controls
Monitor emerging threats, software supply-chain risks, and AI security developments
Influence senior stakeholders through risk framing, trade-off analysis, and recommendations
Mentor Product Security Engineers and raise security maturity across the engineering organization

Requirements

What you’ll need

7+ years of experience in software, product, application, or cloud security
Experience driving security programs from design through rollout, such as secure SDLC, AI SDLC, vulnerability management, platform hardening, or security automation
Practical understanding of how engineers build and ship software
Ability to translate security requirements into workflows teams will adopt
Strong hands-on familiarity with containers, Kubernetes, public cloud, and associated security controls
Experience with SOC 2, ISO 27001, NIST, or SLSA
Ability to automate security workflows in Go, Python, or Shell and integrate them into CI/CD
Ability to influence and align teams through clear, concise communication in a remote-first environment
Strong ownership, accountability, and adaptability
Experience designing or operating an AI SDLC, AI security program, or governance model for AI-assisted development is preferred
Background in software supply-chain security, including SBOMs, provenance, signing, or build-system hardening is preferred
Experience with red-teaming, offensive security, or security-sensitive open-source software development is preferred
Experience with SAST, DAST, SCA, IaC scanning, policy-as-code, or related security tooling is preferred
Public speaking or writing on security topics, or participation in industry communities and standards bodies is preferred
Experience in an early-stage or high-growth company is preferred

Benefits

Comp & perks

Work remotely with team meetup opportunities
Bi-annual destination summits
Monthly stipend for coworking spaces, phone and internet costs
Stock options upon hire and promotion
Participation in secondary offerings
10 years to exercise stock options
100% covered health, vision and dental insurance premiums for employee and dependents
Flexible time off
18 weeks paid parental leave for birthing parents
12 weeks paid parental leave for non-birthing parents
Equal opportunity employment