Principal Product Security Researcher

Responsibilities

• ▹Own the product security research agenda for Chainguard: scanning the broader ecosystem, identifying emerging attack patterns, and translating them into clear risks and opportunities
• ▹Shape security direction across products and platforms, partnering closely with Product, Engineering, and Security leadership
• ▹Research emerging threats and trends in software supply chain and product security, and analyze their impact on Chainguard's products and customers
• ▹Design creative mitigations across people, process, and technology, not just proof-of-concept demos but pragmatic defenses that actually get adopted
• ▹Lead large-scale, multi-quarter initiatives that materially reduce risk or improve security maturity across multiple product lines and platforms
• ▹Partner with executive and senior engineering leadership to drive org-level security strategy, influence roadmap decisions, and secure buy-in for big, complex changes
• ▹Identify systematic weaknesses (in systems, structures, and sometimes habits) and develop plans that fix root causes
• ▹Mentor and uplevel others across Product Security and Engineering, helping teams think more strategically about threats and long-term security posture
• ▹Represent Chainguard externally through talks, conferences, and thought leadership

Requirements

• ▹Deep experience in product or application security, with a track record of leading research or threat-focused work that drove clear, company-level outcomes
• ▹Expert knowledge across multiple domains such as secure architecture, application/product security, software supply chain, and org-level risk management, and knowing how to balance security, velocity, and reliability
• ▹Comfortable owning ambiguous, cross-functional problems and turning them into structured, prioritized initiatives that ship and stick
• ▹Proven ability to present

About the company

Chainguard is the trusted source for open source, delivering hardened, secure, production-ready builds relied on by software engineers and AI agents. Customers include Fortune 500 enterprises such as Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. The company is venture-backed by investors including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital.