Senior Product Security Engineer

A senior product security engineer embedded in how Chainguard builds and ships its products, focused on locking down pipelines and cloud-native workloads rather than acting as a final gate.

The engineer builds CI/CD pipelines with security checks, automates how product risk exposure is captured, enforces supply chain controls such as signing, SBOMs and SLSA provenance with Sigstore and Cosign, threat models Kubernetes workloads on GCP and AWS, and hardens images, cluster settings and cloud IAM. Chainguard wants five or more years in software or security engineering, strong Go or Python, deep production Kubernetes security experience, GCP or AWS security skills, pipeline security work, and familiarity with container and supply chain security tooling. Policy-as-code and offensive security experience are pluses.