Senior Product Security Engineer
Core
Design, build, and maintain secure CI/CD pipelines; harden container images, Kubernetes clusters, and cloud IAM postures for Chainguard's open-source software supply chain products.
Role type
Senior Product Security Engineer (Cloud-Native & Supply Chain)
Builds
Hardened container images, secure CI/CD pipelines, Kubernetes clusters, and cloud-native security controls for open-source software.
Domain
Cybersecurity, Cloud-Native, Software Supply Chain
Required skills
Go or Python, Kubernetes production hardening, GCP/AWS security services, CI/CD pipeline security, container security, software supply chain security tooling, cloud security frameworks
Preferred skills
Chainguard Images, policy-as-code tools, open source security contributions, security research or offensive security
Technologies
Kubernetes, GCP, AWS, GitHub Actions, Cloud Build, Tekton, Sigstore, SLSA, SBOM, OPA, Kyverno, Conftest
Responsibilities
Design and maintain secure CI/CD pipelines with security gates; implement software supply chain security controls (signed artifacts, SBOMs, provenance attestation); lead security architecture reviews and threat models for Kubernetes workloads; harden container images and cloud IAM postures; define and drive adoption of baseline security standards.
Seniority
Senior, hands-on IC
