Remote opportunity at
ChainguardPrincipal Product Security Engineer
Chainguard is seeking a Principal Product Security Engineer to help shape product security direction across major platforms and drive large-scale, cross-functional risk reduction programs. Operating in…
Career Tools
About This Role
Chainguard is seeking a Principal Product Security Engineer to help shape product security direction across major platforms and drive large-scale, cross-functional risk reduction programs. Operating in a remote-first setting with high autonomy, this senior-level position involves partnering closely with engineering and product leadership to embed security by design, accelerate vulnerability remediation through automation, and refine security assurance activities such as pentests and bug bounties. The ideal candidate will guide the…
Job Description
Chainguard is seeking a Principal Product Security Engineer to help shape product security direction across major platforms and drive large-scale, cross-functional risk reduction programs. Operating in a remote-first setting with high autonomy, this senior-level position involves partnering closely with engineering and product leadership to embed security by design, accelerate vulnerability remediation through automation, and refine security assurance activities such as pentests and bug bounties. The ideal candidate will guide the adoption of developer-friendly security tooling, support compliance frameworks including SOC 2 and ISO 27001, and mentor product security engineering staff.
Chainguard provides trusted, hardened, and production-ready open source software builds that assist organizations in building faster and eliminating risk. Backed by prominent venture capital investors, the company serves global industry leaders and Fortune 500 enterprises. Employees enjoy a remote-first work culture supplemented by destination summits, a monthly stipend for connectivity and coworking, stock options with a ten-year exercise window, fully paid health, vision, and dental insurance premiums for workers and dependents, unlimited flexible time off, and extensive paid parental leave.
Responsibilities
- Establish product security strategy and define security guardrails for AI-assisted development workflows
- Direct cross-functional programs focused on secure SDLC enhancements and vulnerability reduction
- Collaborate with engineering teams to automate vulnerability detection, triage, and remediation
- Enhance security assurance programs by managing pentests, vulnerability assessments, bug bounties, and red-team operations
- Promote the integration of static and dynamic analysis, dependency checks, and IaC scanners into CI/CD pipelines
- Maintain and apply standards like SOC 2, ISO 27001, NIST, and NIS2 to implement durable, automation-friendly controls
- Offer expert guidance and risk framing to senior leaders while mentoring product security engineers
- Monitor the evolving threat landscape and translate emerging risks into concrete control improvements
Requirements
- Minimum of 10 years of experience in software, product, or application security with ownership of complex platforms
- Deep expertise in secure architecture and system design for distributed or cloud-native systems, including modern authentication and authorization patterns
- Demonstrated history of driving organization-level risk management and security programs from conception to rollout
- Strong practical familiarity with public cloud environments, containers, Kubernetes, and relevant security controls
- Working knowledge of security compliance frameworks and translating controls into daily engineering tasks
- Proficiency in automating security workflows using at least one language such as Go, Python, or Shell
- Proven capability to influence senior stakeholders and align remote teams through concise communication
- High level of accountability, adaptability, and ownership in navigating ambiguity
Qualifications
- Background in software supply chain security covering SBOMs, SLSA, provenance, signing, and build system hardening
- Previous involvement in offensive security, red-teaming, or open source software development in security-focused projects
- Experience with public speaking, writing about security, or participating in industry standards communities
- Prior work history within early-stage or fast-growing technology companies
Core Skills
Benefits
- Flexible remote-first culture with destination summits and a monthly stipend for internet, phone, and coworking spaces
- Stock options upon hire, promotion, and secondary participation with a 10-year exercise window
- 100% employer-paid health, vision, and dental insurance premiums for employees and dependents
- Flexible time off policy
- 18 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, this role operates within a flexible and remote-first culture.
What is the employment type?
The posting specifies that this is a full-time position.
What salary is offered for this role?
The salary is not stated in the job posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
