Staff Product Security Engineer

🔥 1 minute ago

🇨🇦 Canada – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 39 days.
• 99 open roles for a team of 64.
• No salary listed.

Apply Now

Find Similar Remote Jobs

Chainguard

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2021

🔐 Security

☁️ SaaS

🔒 Cybersecurity

Security • SaaS • Cybersecurity

Chainguard is a company that specializes in building secure container images to enhance software security and compliance. Their products include low-to-zero CVE container images, which are updated daily to maintain security and compliance standards such as FedRAMP, NIST 800-53, PCI-DSS, SOC2, and CIS benchmarks. Chainguard focuses on reducing vulnerabilities, automating compliance, and supporting development workflows without compromising on innovation and productivity. The company serves a wide range of industries, including highly regulated sectors, by providing hardened image solutions to mitigate software supply chain risks and enhance application security.

📋 Description

• Design, build, and maintain secure CI/CD pipelines with security gates that identify issues before production. • Systematically, consistently, and automatically capture the risk exposure of Chainguard products. • Implement and enforce software supply chain security controls, including signed artifacts, SBOMs, and provenance attestation using SLSA and Sigstore/Cosign. • Identify emerging customer security needs and build solutions to address them. • Lead security architecture reviews and threat models for Kubernetes-based workloads on GCP and AWS. • Harden container images, Kubernetes cluster configurations, and cloud IAM postures to minimize attack surface. • Define and drive adoption of baseline security standards, including pod security standards, network policies, workload identity, and secrets management.

🎯 Requirements

• 8+ years in software engineering, security engineering, or a combined role with meaningful hands-on security responsibility throughout. • Strong proficiency in Go or Python, with ability to write, review, and debug production-quality code. • Deep, hands-on production Kubernetes experience, including cluster hardening, RBAC, network policies, and admission controllers. • Practical expertise with GCP and/or AWS, including IAM, workload identity, secrets management, and security services. • Proven track record designing and securing CI/CD pipelines, such as GitHub Actions, Cloud Build, or Tekton. • Fluency with container security, including image scanning, distroless/minimal base images, and runtime security. • Experience with software supply chain security tooling and frameworks, including Sigstore, SLSA, and SBOM generation. • Solid understanding of OWASP, NIST, and cloud security frameworks and their pragmatic application. • Familiarity with Chainguard Images or other minimal/hardened container base image ecosystems. • Experience with policy-as-code tools such as OPA, Kyverno, and Conftest. • Contributions to open source security projects. • Background in security research or offensive security, such as bug bounty, CTF, or penetration testing.

🏖️ Benefits

• Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs. • Receive stock options upon hire and promotion. • Participation in secondary offerings. • 10 years to exercise stock options. • 100% covered health, vision and dental insurance premiums for the employee and dependents. • ∞ Flexible Time Off. • 18 weeks paid parental leave for birthing parents and 12 weeks for non-birthing parents, usable all at once or throughout the child's first year.

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume