Senior Security Analyst (Governance and Trust)

A senior analyst on Chainguard's Governance & Trust team, initially leading the security assurance work behind the company's move into the US public sector, including FedRAMP 20x and CMMC Level 2.

The analyst interprets requirements, works with engineering and product security to see how systems really operate, assesses whether controls address risk, designs automated and continuous ways to produce evidence, and also supports customer security reviews and third-party risk assessments. Federal compliance experience is not required. Chainguard wants a strong security foundation from engineering, cloud, operations, risk or assurance work, comfort discussing cloud and SaaS architecture with engineers, sound judgement and the ability to run projects independently. NIST 800-53, SOC 2 and evidence automation experience are pluses. Remote, US only.