Staff Software Engineer, Malware Detection

🕒 il y a 21 jours

🇨🇦 Canada – Télétravail

⏰ Temps Plein

🔴 Expert

🧑‍💻 Développeur Full-Stack

👻 Score fantôme 30%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Chainguard

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2021

🔐 Sécurité

☁️ SaaS

🔒 Cybersecurity

Security • SaaS • Cybersecurity

Chainguard est une entreprise spécialisée dans la création d’images de conteneur sécurisées afin de renforcer la sécurité logicielle et la conformité. Ses produits incluent des images de conteneur à faible, voire zéro, CVE, mises à jour quotidiennement pour respecter des référentiels de sécurité et de conformité tels que FedRAMP, NIST 800-53, PCI-DSS, SOC 2 et les CIS Benchmarks. Chainguard se concentre sur la réduction des vulnérabilités, l’automatisation de la conformité et le support des workflows de développement, sans compromettre l’innovation ni la productivité. L’entreprise sert un large éventail d’industries, y compris des secteurs fortement réglementés, en fournissant des images durcies qui atténuent les risques de la chaîne d’approvisionnement logicielle et renforcent la sécurité des applications.

Description

• Lead engineering of Chainguard's shared malware scanning platform. • Own the platform's architecture, scale, and reliability. • Build measurement pipelines, metrics, and dashboards for detection coverage and precision. • Engineer feedback loops between Engineering and Product Security so detection changes can be evaluated and shipped quickly. • Build systems for reviewing, escalating, and correcting detections, including bulk correction at ecosystem scale. • Own scan orchestration, verdict storage, and APIs used by consuming products. • Scale the scanner from Libraries to Containers, Agent Skills, and future artifact types. • Balance detection quality, performance, extensibility, throughput, latency, and cost. • Build deterministic static analysis and AI-assisted reasoning over artifact contents. • Partner with Product Security to move emerging-threat detections from research prototypes to production. • Build APIs and services for investigating, enforcing, and appealing scanner findings. • Build backend systems for policy management and enterprise-scale operations. • Operate the scanner in the critical path of customer installations, including alerting, queue health, verdict-before-serve guarantees, and incident response. • Partner with Product to define customer experiences around scanner verdicts.

🎯 Exigences

• Multiple years building and operating production backend or infrastructure systems, with a clear track record of staff-level ownership and technical leadership. • Strong Go experience, or deep backend systems experience with the ability to ramp quickly in Go. • Experience owning highly technical platforms or backend infrastructure supporting multiple products or internal customers. • Experience with high-throughput, event-driven pipelines where throughput, latency, and correctness all matter. • Strong understanding of software supply chain security, malware detection, vulnerability management, or adjacent security domains. • Demonstrated success making engineering design and prioritization decisions in technically complex and ambiguous environments. • Comfort owning and reducing metrics such as false-positive rate. • Experience deploying and operating production services, with judgment around reliability, observability, and operational tradeoffs. • Experience mentoring engineers and raising the bar on design and code review. • Excellent cross-functional collaboration skills with Product, Security, Design, and GTM partners. • Nice to have: malware detection, static analysis, SCA, vulnerability scanning, package ecosystems, reusable platform capabilities, cloud infrastructure, software supply chain security, enterprise security platforms, AI-assisted security analysis, sandboxing, dynamic analysis, eBPF, gVisor, seccomp, container isolation, Terraform.

🏖️ Avantages

• Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs. • Receive stock options upon hire and promotion. • Participate in secondary offerings. • 10 years to exercise stock options. • 100% covered health, vision and dental insurance premiums for you and your dependents. • ∞ Flexible Time Off. • 18 weeks paid parental leave for birthing parents and 12 weeks for non-birthing parents, usable all at once or throughout the child's first year. • Team meetup opportunities. • Bi-annual destination summits. • Monthly coworking, phone, and internet stipend.