Staff Software Engineer, Malware Detection

🔥 19 hours ago

🇨🇦 Canada – Remote

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Chainguard

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2021

🔐 Security

☁️ SaaS

🔒 Cybersecurity

Security • SaaS • Cybersecurity

Chainguard is a company that specializes in building secure container images to enhance software security and compliance. Their products include low-to-zero CVE container images, which are updated daily to maintain security and compliance standards such as FedRAMP, NIST 800-53, PCI-DSS, SOC2, and CIS benchmarks. Chainguard focuses on reducing vulnerabilities, automating compliance, and supporting development workflows without compromising on innovation and productivity. The company serves a wide range of industries, including highly regulated sectors, by providing hardened image solutions to mitigate software supply chain risks and enhance application security.

📋 Description

• Lead engineering of Chainguard's shared malware scanning platform. • Own the platform's architecture, scale, and reliability. • Build measurement pipelines, metrics, and dashboards for detection coverage and precision. • Engineer feedback loops between Engineering and Product Security so detection changes can be evaluated and shipped quickly. • Build systems for reviewing, escalating, and correcting detections, including bulk correction at ecosystem scale. • Own scan orchestration, verdict storage, and APIs used by consuming products. • Scale the scanner from Libraries to Containers, Agent Skills, and future artifact types. • Balance detection quality, performance, extensibility, throughput, latency, and cost. • Build deterministic static analysis and AI-assisted reasoning over artifact contents. • Partner with Product Security to move emerging-threat detections from research prototypes to production. • Build APIs and services for investigating, enforcing, and appealing scanner findings. • Build backend systems for policy management and enterprise-scale operations. • Operate the scanner in the critical path of customer installations, including alerting, queue health, verdict-before-serve guarantees, and incident response. • Partner with Product to define customer experiences around scanner verdicts.

🎯 Requirements

• Multiple years building and operating production backend or infrastructure systems, with a clear track record of staff-level ownership and technical leadership. • Strong Go experience, or deep backend systems experience with the ability to ramp quickly in Go. • Experience owning highly technical platforms or backend infrastructure supporting multiple products or internal customers. • Experience with high-throughput, event-driven pipelines where throughput, latency, and correctness all matter. • Strong understanding of software supply chain security, malware detection, vulnerability management, or adjacent security domains. • Demonstrated success making engineering design and prioritization decisions in technically complex and ambiguous environments. • Comfort owning and reducing metrics such as false-positive rate. • Experience deploying and operating production services, with judgment around reliability, observability, and operational tradeoffs. • Experience mentoring engineers and raising the bar on design and code review. • Excellent cross-functional collaboration skills with Product, Security, Design, and GTM partners. • Nice to have: malware detection, static analysis, SCA, vulnerability scanning, package ecosystems, reusable platform capabilities, cloud infrastructure, software supply chain security, enterprise security platforms, AI-assisted security analysis, sandboxing, dynamic analysis, eBPF, gVisor, seccomp, container isolation, Terraform.

🏖️ Benefits

• Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs. • Receive stock options upon hire and promotion. • Participate in secondary offerings. • 10 years to exercise stock options. • 100% covered health, vision and dental insurance premiums for you and your dependents. • ∞ Flexible Time Off. • 18 weeks paid parental leave for birthing parents and 12 weeks for non-birthing parents, usable all at once or throughout the child's first year. • Team meetup opportunities. • Bi-annual destination summits. • Monthly coworking, phone, and internet stipend.