Staff Vulnerability Management Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $170k - $231k / year

⏰ Full Time

🔴 Lead

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Chainguard

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2021

🔐 Security

☁️ SaaS

🔒 Cybersecurity

Security • SaaS • Cybersecurity

Chainguard is a company that specializes in building secure container images to enhance software security and compliance. Their products include low-to-zero CVE container images, which are updated daily to maintain security and compliance standards such as FedRAMP, NIST 800-53, PCI-DSS, SOC2, and CIS benchmarks. Chainguard focuses on reducing vulnerabilities, automating compliance, and supporting development workflows without compromising on innovation and productivity. The company serves a wide range of industries, including highly regulated sectors, by providing hardened image solutions to mitigate software supply chain risks and enhance application security.

📋 Description

• Own the measurement, disclosure, and reporting of a pipeline of thousands of novel vulnerabilities identified weekly by frontier models and other sources. • Calibrate the response process in response to emerging trends. • Manage reporting of newly discovered vulnerabilities to upstream projects and maintainers. • Run the CNA program to assign new CVEs where necessary. • Coordinate internal and external embargoes with customers, internal engineering teams, and external maintainers. • Work with the Linux Foundation, CISA, and other bodies to coordinate actions and responses. • Guide and lead industry direction so emerging standards and norms meet Chainguard customer needs. • Represent Chainguard externally and visibly as the face of its industry-leading efforts. • Work with AI model vendors to guide the future evolution of the software supply chain.

🎯 Requirements

• 7+ years in software security, open source maintenance, or vulnerability disclosure management. • Strong understanding of responsible disclosure. • Practical expertise automating pipelines and processes to operate at large scale and remove the human-in-the-loop. • Deep experience with open source communities. • Experience coordinating with public sector or industry standards bodies and working groups.

🏖️ Benefits

• Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs. • Receive stock options upon hire and promotion. • Participate in secondary offerings and have 10 years to exercise your options. • 100% covered health, vision and dental insurance premiums for you and your dependents. • Unlimited flexible time off. • 18 weeks paid parental leave for birthing parents and 12 weeks for non-birthing parents. • Option to use parental leave all at once or throughout the child's first year.