Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk.
Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake.
Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital.
The role in a nutshell:
You are a deeply technical engineer who gets restless when pipelines aren't locked down. You care about shipping secure software! At Chainguard, you won't be a gate at the end of the process; you'll be embedded in it.
What you’ll do:
Build & Harden Secure Pipelines
Cloud-Native Product Hardening
What we're looking for:
Required
Nice to Have
We live and breathe our company values:
A few of the benefits we offer:
If your experience is close but doesn't fulfill all requirements, please apply. We're building the best team in technology and are focused on hiring "Chainguardians" with unique backgrounds, perspectives, and experiences.
Chainguard is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.
By submitting your application, you acknowledge that Chainguard will process your personal data in accordance with Chainguard's Global Candidate Privacy Notice.
©2026 Chainguard. All Rights Reserved.
Lead high-stakes product security incident investigations, coordinate vulnerability fixes across engineering and release teams, and oversee CVE disclosure to strengthen response practices across a SaaS platform.
Lead high-severity product security investigations and incident response, coordinate fixes across engineering and release teams, and own CVE disclosure to strengthen ServiceNow’s security response.
Leads high-impact product security investigations and incident response, coordinating vulnerability fixes, CVE disclosures, and post-incident improvements across engineering, product, and release teams.
Lead complex OT penetration testing, purple teaming, and vulnerability assessment engagements, uncovering industrial attack paths and translating findings into remediation guidance, security improvements, and strategic R&D priorities.
Build and harden secure CI/CD pipelines and cloud-native products, leading security reviews and threat modeling while reducing risk across Kubernetes workloads, containers, and software supply chains.
