Staff Product Security Engineer

Chainguard, United States - Remote +1

Chainguard has this job in 1 other place

United States - Remote

The role

Remote: United States, UK, Canada

At Chainguard, our security posture is our competitive advantage. As a Staff Product Security Engineer, you will help make secure-by-default development a reality across our products and engineering organization.

You will lead high-impact, cross-functional security initiatives; partner closely with Engineering, Product, and Security leadership; and turn complex risks into practical, shippable improvements. A key focus of this role is the AI SDLC: establishing the policies, tooling, and guardrails that enable engineers to use AI responsibly and do the right thing by default—from design and coding through testing, review, deployment, and operations.

Posted pay

$205K–$231K

a year

Compared with similar jobs

This base pay is near the median for staff security engineering jobs that are remote in the US.

Median: $221K a year
Other jobs in the group: 58

We compare the middle of each posted range. This is base pay as posted. The group does not include this job.

Location

United States - Remote +1

Work type

Remote

Level

Staff

Experience

7+ years

Skills in the job text

Posted

20 days ago

Last check

11 h ago

Job type

Security engineering

The role

Remote: United States, UK, Canada

What you will do

Drive product security strategy and execution across multiple products, platforms, and engineering teams.
Lead the evolution of Chainguard’s secure SDLC, with particular emphasis on the AI SDLC and the changing risks of AI-assisted development.
Define and implement practical guardrails for AI use in engineering, including secure patterns, policy, workflow controls, review practices, and automation that help teams move quickly while using AI responsibly.
Partner with Engineering to embed security controls into the full development lifecycle, including architecture, design, coding, testing, code review, deployment, and operations.
Lead secure architecture reviews and threat-modeling efforts for high-impact systems; identify systemic weaknesses early and guide teams toward scalable mitigations.
Own cross-functional initiatives such as vulnerability reduction, security automation, and secure-by-default engineering improvements.
Partner with Engineering to automate vulnerability detection, triage and remediation, including policy-as-code and cloud or container security controls.
Champion the adoption of security tooling—including static and dynamic analysis, dependency and license checks, infrastructure-as-code scanners, and AI-related controls—within developer workflows and CI/CD.
Improve how Chainguard runs and consumes security assurance activities such as penetration tests, vulnerability assessments, bug bounty programs, and red-team exercises so findings result in lasting improvements.
Translate frameworks such as SOC 2, ISO 27001, NIST, and SLSA into durable, automation-friendly engineering controls.
Stay current on emerging threats, software supply-chain risks, and AI security developments, and turn them into concrete changes to our controls, tooling, and product direction.
Influence senior stakeholders through clear risk framing, trade-off analysis, and pragmatic recommendations.
Mentor Product Security Engineers and help raise the security bar across the engineering organization.

Staff Product Security Engineer

The role

Staff Product Security Engineer

The role

What you will do

What you need

Nice to have

We live and breathe our company values

A few of the benefits we offer

Pay and benefits

About Chainguard

Similar jobs at other companies

Product Security Engineer

Product Security Engineer

Senior Product Security Engineer

Security Engineer

Staff Security Engineer, AI

Staff Security Engineer (Product & Cloud)

Company facts

Interview questions

Chainguard

Compared with similar jobs