Senior Security Analyst (Governance and Trust)
Core
Build a portable continuous monitoring and authorization capability to support CMMC, FedRAMP, and other public-sector security regimes for Chainguard's cloud-native systems.
Role type
Senior Security Analyst (Governance & Trust)
Builds
Continuous monitoring systems, evidence pipelines, and automated compliance controls for public-sector customers.
Domain
Cybersecurity, Public Sector Compliance, Cloud-Native Security
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Federal/defense environment experience, CMMC Level 2, FedRAMP/RMF/NIST 800-53, risk-based judgment, policy-as-code, cross-functional coordination
Preferred skills
Facility Clearance (FCL) processes, FedRAMP 20x, automated evidence collection, non-US public-sector regimes (IRAP, C5), software supply chain security (SBOM, SLSA)
Responsibilities
Design portable continuous monitoring frameworks, translate federal requirements into practical controls, partner with engineering on cloud-native security, support Facility Clearance pursuit, build scalable automation for control ownership and reporting, coordinate cross-functional federal program work, provide risk-based technical recommendations
Seniority
Senior, hands-on IC
