Staff Software Engineer, Malware Detection

🕒 3 days ago

🇺🇸 United States – Remote

💵 $170k - $231k / year

⏰ Full Time

🔴 Lead

🧑‍💻 Full-stack Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Chainguard

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2021

🔐 Security

☁️ SaaS

🔒 Cybersecurity

Security • SaaS • Cybersecurity

Chainguard is a company that specializes in building secure container images to enhance software security and compliance. Their products include low-to-zero CVE container images, which are updated daily to maintain security and compliance standards such as FedRAMP, NIST 800-53, PCI-DSS, SOC2, and CIS benchmarks. Chainguard focuses on reducing vulnerabilities, automating compliance, and supporting development workflows without compromising on innovation and productivity. The company serves a wide range of industries, including highly regulated sectors, by providing hardened image solutions to mitigate software supply chain risks and enhance application security.

📋 Description

• Lead engineering of Chainguard's malware-scanning platform • Own platform architecture, scale, and reliability • Build measurement pipelines, metrics, and dashboards for detection coverage and precision • Engineer feedback loops between Engineering and Product Security for rapid detection evaluation and shipping • Build systems for reviewing, escalating, and correcting detections, including bulk correction at ecosystem scale • Own scan orchestration, verdict storage, and APIs used by consuming products • Scale scanning from Libraries to Containers, Agent Skills, and future artifact types • Balance detection quality, performance, extensibility, throughput, latency, and cost • Build deterministic static analysis and AI-assisted reasoning over artifact contents • Take emerging-threat detections from research prototype to production • Build APIs and services for investigating, enforcing, and appealing scanner findings • Build backend services for policy management and enterprise-scale operations • Operate the scanner in the critical path of customer installations, including alerting, queue health, verdict-before-serve guarantees, and incident response • Mentor engineers and influence Product, Security, Design, and GTM partners

🎯 Requirements

• Multiple years building and operating production backend or infrastructure systems • Clear track record of staff-level ownership and technical leadership • Strong Go experience, or deep backend systems experience with ability to ramp quickly in Go • Experience owning highly technical platforms or backend infrastructure supporting multiple products or internal customers • Experience with high-throughput, event-driven pipelines where throughput, latency, and correctness matter • Strong understanding of software supply chain security, malware detection, vulnerability management, or adjacent security domains • Demonstrated success making engineering design and prioritization decisions in technically complex and ambiguous environments • Comfort owning and reducing metrics such as false-positive rate • Experience deploying and operating production services • Strong judgment around reliability, observability, and operational tradeoffs • Experience mentoring engineers and raising the bar on design and code review • Excellent cross-functional collaboration skills with Product, Security, Design, and GTM partners

🏖️ Benefits

• Work remotely with team meetup opportunities • Bi-annual destination summits • Monthly stipend for coworking spaces, phone and internet costs • Stock options upon hire and promotion • Participation in secondary offerings • 10 years to exercise stock options • 100% covered health, vision and dental insurance premiums for employee and dependents • Flexible time off • 18 weeks paid parental leave for birthing parents • 12 weeks paid parental leave for non-birthing parents • Option to use parental leave all at once or throughout the child's first year