Staff Product Security Engineer

🕒 6 dias atrás

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $205.000 - $231.000 / ano

⏰ Tempo Integral

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 20%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Chainguard

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2021

🔐 Segurança

☁️ SaaS

🔒 Cibersegurança

Security • SaaS • Cybersecurity

A Chainguard é uma empresa especializada na construção de imagens de container seguras para elevar a segurança de software e a conformidade. Seus produtos incluem imagens de container com zero ou quase zero CVEs, atualizadas diariamente para manter padrões de segurança e conformidade como FedRAMP, NIST 800-53, PCI-DSS, SOC 2 e os benchmarks CIS. A Chainguard foca em reduzir vulnerabilidades, automatizar a conformidade e dar suporte aos fluxos de trabalho de desenvolvimento sem comprometer a inovação e a produtividade. A empresa atende a uma ampla variedade de setores, inclusive os altamente regulados, oferecendo soluções de imagens hardened para mitigar riscos na cadeia de suprimentos de software e aprimorar a segurança de aplicações.

Descrição

• Drive product security strategy and execution across multiple products, platforms, and engineering teams • Lead the evolution of Chainguard’s secure SDLC, with emphasis on the AI SDLC and AI-assisted development risks • Define and implement guardrails for responsible AI use in engineering • Partner with Engineering to embed security controls across architecture, design, coding, testing, code review, deployment, and operations • Lead secure architecture reviews and threat-modeling efforts • Own vulnerability reduction, security automation, and secure-by-default engineering initiatives • Automate vulnerability detection, triage, and remediation, including policy-as-code and cloud or container security controls • Champion security tooling such as static and dynamic analysis, dependency and license checks, IaC scanners, and AI-related controls in developer workflows and CI/CD • Improve security assurance activities including penetration tests, vulnerability assessments, bug bounty programs, and red-team exercises • Translate SOC 2, ISO 27001, NIST, and SLSA into durable engineering controls • Monitor emerging threats, software supply-chain risks, and AI security developments • Influence senior stakeholders through risk framing, trade-off analysis, and recommendations • Mentor Product Security Engineers and raise security maturity across the engineering organization

🎯 Requisitos

• 7+ years of experience in software, product, application, or cloud security • Experience driving security programs from design through rollout, such as secure SDLC, AI SDLC, vulnerability management, platform hardening, or security automation • Practical understanding of how engineers build and ship software • Ability to translate security requirements into workflows teams will adopt • Strong hands-on familiarity with containers, Kubernetes, public cloud, and associated security controls • Experience with SOC 2, ISO 27001, NIST, or SLSA • Ability to automate security workflows in Go, Python, or Shell and integrate them into CI/CD • Ability to influence and align teams through clear, concise communication in a remote-first environment • Strong ownership, accountability, and adaptability • Experience designing or operating an AI SDLC, AI security program, or governance model for AI-assisted development is preferred • Background in software supply-chain security, including SBOMs, provenance, signing, or build-system hardening is preferred • Experience with red-teaming, offensive security, or security-sensitive open-source software development is preferred • Experience with SAST, DAST, SCA, IaC scanning, policy-as-code, or related security tooling is preferred • Public speaking or writing on security topics, or participation in industry communities and standards bodies is preferred • Experience in an early-stage or high-growth company is preferred

🏖️ Benefícios

• Work remotely with team meetup opportunities • Bi-annual destination summits • Monthly stipend for coworking spaces, phone and internet costs • Stock options upon hire and promotion • Participation in secondary offerings • 10 years to exercise stock options • 100% covered health, vision and dental insurance premiums for employee and dependents • Flexible time off • 18 weeks paid parental leave for birthing parents • 12 weeks paid parental leave for non-birthing parents • Equal opportunity employment

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo