Responsible for designing and operating portable continuous monitoring/authorization capabilities for public-sector compliance (CMMC 2.0, FedRAMP, RMF/NIST 800-53), translating requirements into automated controls and evidence pipelines, supporting Facility Clearance efforts, and coordinating across Engineering, Product, Legal, and GTM teams. Role requires hands-on federal or defense experience and technical depth with cloud-native/SaaS systems.

Chainguard is hiring a Security Engineer to design and deploy detection/prevention controls, engineer custom detection logic, integrate threat intelligence, automate with SOAR, conduct threat hunts across forensic data lakes, and contribute to incident response and tabletop exercises. The role is remote (United States), expects 3+ years of information security or software development experience, and lists skills including cloud-native security, EDR, digital forensics, threat intelligence, Go/Python/shell scripting, macOS/Linux, and AI security. Base salary range $105,000–$123,000 USD.

Individual-contributor Staff role responsible for operating and scaling a pipeline of novel vulnerabilities (identification, measurement, disclosure and reporting), running a CNA program to assign CVEs, coordinating embargoes with customers and maintainers, and representing Chainguard with industry and public-sector bodies (e.g., Linux Foundation, CISA). Requires 7+ years in software security, open source maintenance, or vulnerability disclosure management and practical experience automating pipelines and working with open source communities. Familiarity with Python, Java, JavaScript, or Go and security research/pen testing or bug bounty experience are listed as nice-to-have.

Lead technical ownership of a high-volume novel vulnerabilities pipeline: measure, disclose, and report vulnerabilities identified by frontier models and other sources; automate and calibrate response processes; run a CNA program and assign CVEs where needed; coordinate embargoes with customers, internal teams, and maintainers; and represent Chainguard with bodies such as the Linux Foundation and CISA. Requires 7+ years in software security, open source maintenance, or vulnerability disclosure management.

Lead the management of a large pipeline of novel vulnerabilities identified by frontier models and other sources, including measurement, disclosure, CVE/CNA handling, embargo coordination, and cross-industry collaboration with bodies such as the Linux Foundation and CISA. Requires 7+ years in software security, open source maintenance, or vulnerability disclosure management and strong experience automating large-scale processes.

Chainguard seeks a Senior Security Engineer to design, harden, and maintain secure, resilient multi‑cloud environments that power the product. The role partners with Developer Platform and IAM teams, implements IaC and automation (Terraform, Kubernetes/GKE, CI/CD), addresses software supply chain security (SLSA), supports AI/ML and agentic workflow infrastructure, and assists with incident response. Remote within the United States. Salary range listed: $130k–$160k USD per year.

Chainguard seeks an early-career Security Engineer (United States - Remote) to operate and secure cloud platforms, IAM, and AI/ML infrastructure. Responsibilities include implementing access controls and identity policies, hardening and monitoring cloud systems, securing AI pipelines, scripting and automation, troubleshooting, and documenting runbooks; reports to the Director of Cyber Resiliency. Base salary $105,000–$123,000 USD.

Role involves designing and maintaining secure CI/CD pipelines with security gates, hardening Kubernetes-based workloads on GCP and AWS, implementing supply chain security controls (SBOMs, provenance, signing), and driving baseline security standards and tooling adoption.

Chainguard seeks a Senior Product Security Engineer to design, build, and maintain secure CI/CD pipelines and harden cloud-native products running on GCP and AWS. The role requires strong hands-on experience with Kubernetes, container security, supply chain tools (Sigstore, SLSA, SBOMs), and production-grade coding in Go or Python.

Individual-contributor (Staff) Product Security Engineer based in the United Kingdom (remote). Responsibilities include designing and maintaining secure CI/CD pipelines, implementing software supply chain security (SBOMs, Sigstore/Cosign, SLSA), hardening Kubernetes workloads and container images, defining baseline security standards, and operationalising cloud-native security tooling across GCP and AWS. Requires 7+ years of relevant software/security engineering experience and strong proficiency in Go or Python.