Senior Product Security Engineer

Chainguard seeks a Senior Product Security Engineer to embed security into CI/CD pipelines, enforce software supply chain controls (Sigstore, SLSA, SBOMs), harden Kubernetes and cloud environments (GCP/AWS), and lead security architecture reviews. The role involves proactive customer security needs and operationalizing CNAPP/CSPM tooling.

5+ years in software engineering, security engineering, or a combined role with meaningful hands-on security responsibility throughout. Strong proficiency in Go or Python, with the ability to write, review, and debug production-quality code. Deep, hands-on experience with Kubernetes in production (cluster hardening, RBAC, network policies, admission controllers). Practical expertise with GCP and/or AWS: IAM, workload identity, secrets management, security services (e.g., GCP Security Command, 5+