Senior/Staff Security Engineer

Open Source has taken over the world of software development; however, the largest trade-off still persists: security. Companies spend an enormous amount of time and resources patching and fortifying open source software in order to ship with confidence & compliance. 

Founded by the industry's leading experts on open source software, security and cloud native development, Chainguard has built the largest library of open source software that is secure by default. Customers including Snowflake, Canva, and HPE rely on Chainguard to build securely with open source software across the organization.

Chainguard is the safe source for open source.

About Us

We live and breathe our company values:

We are customer obsessed - Our true advantage is the strength of our relationships with customers through collaboration, empathy, and responsiveness.  We establish trust as we educate, advocate, and listen to their needs.  Our focus is on delivering solutions to our customers that create value and make their lives better. 

We have a bias for intentional action - We’re a start-up and we need to move fast. However we need to move fast through intentional action to make sure we’re able to deliver quickly and efficiently on what is most impactful to our collective success.  We prioritize, plan, try things, and fail fast.  We think about how what we do impacts other teams and communicate our progress - owning the whole solution from start to finish. If we move fast enough, we can make two or three mistakes, learn, and correct them before competitors even make their first decision.

We don’t take ourselves too seriously (but we do serious work) - Though we are solving an important problem which takes focus and a degree of seriousness, we don’t take ourselves too seriously while we do.  We laugh, have fun, embrace uniqueness, and enjoy the journey. Together.

We trust each other and assume good intentions - We hire great team members and trust them to do their work. We’re transparent with data, news, and decisions - positive or negative - to empower team members to make well informed decisions. Showing up for each other fully means we celebrate each other’s accomplishments as well as give compassionate direct feedback when needed.  We always default to assuming good intentions.

The role, in a nutshell:

As a Security Engineer, your role will be to enable Chainguardians to do their best work through collaborative low-friction Information Security. You will work closely with the IT/Security team and collaborate with teams across the company to improve our security posture and ensure compliance with industry standards and regulations. A successful candidate will possess a strong technical background, excellent problem-solving abilities, and relentless curiosity. 

What you’ll do:

• Design and deploy innovative technical controls to detect and prevent security incidents.
• Collaborate across teams to integrate security best practices into products and processes.
• Keep Chainguard compliant across multiple security frameworks.
• Fill out security questionnaires for prospective customers.
• Lead incident response efforts, including tabletop exercises.
• Conduct security assessments and penetration tests.
• Maintain detection and response automation.
• Research the latest security threats.

What we're looking for (you do not need all of these to apply):

• Bachelor’s of Science degree in Computer Science, Engineering, Computer Security, Information Systems
• 5+ years of experience in software development, security, or relevant field
• Experience securing Cloud-native environments
• Experience with endpoint detection and response
• Familiarity with macOS or Linux security controls
• Familiarity with security frameworks such as SOC 2, ISO 27001, and NIST
• Ability to craft automation with languages such as Go, Python, or Shell.
• Experience with red-teaming or open-source software development
• Strong interpersonal and communication skills
• Ability to work independently across multiple simultaneous work streams

Base Salary Range$140,000—$210,000 USD

A few of the benefits we offer (for our full time employees):

• Equity/stock options
• Unlimited PTO
• Remote work with flexible coworking and team meetup opportunities
• Home office and internet stipend
• 100% health/dental/vision insurance coverage for you and your family