Security Analyst (Governance and Trust)

2 days, 3 hours ago
Full-time
Mid Level
Cybersecurity
Chainguard

Chainguard

Chainguard: Fortified Software Delivery Security for developers and CISOs, ensuring secure by default infrastructure and zero workflow friction.

Internet Software & Services
51-250
Founded 2021
$55M raised

Description

  • Maintain and improve security questionnaire response content, Trust Center materials, and customer-facing security artifacts.
  • Keep security documentation aligned with current products, practices, and architecture.
  • Establish processes for reviewing, updating, versioning, and publishing assurance content.
  • Identify outdated, inconsistent, or incomplete information before customer distribution.
  • Maintain and update AI agents used by the Governance and Trust function.
  • Audit AI agents for accuracy, reliability, quality, and behavioral drift.
  • Update agent instructions, prompts, reference content, and supporting information as requirements change.
  • Document agent behavior, changes, limitations, and review outcomes.
  • Define standards for maintaining AI-enabled security and governance workflows.
  • Partner with stakeholders to improve AI-assisted security operations.

Requirements

  • Experience in security assurance, security operations, GRC, customer trust, or a related security function.
  • Experience maintaining security questionnaires, Trust Center content, data flow diagrams, audit evidence, or similar customer-facing artifacts.
  • Strong attention to detail and disciplined documentation, version-control, and quality-review practices.
  • Experience working with AI models or AI-enabled workflows, including maintaining agents rather than building models from scratch.
  • Familiarity with prompt engineering, prompt evaluation, or similar AI performance techniques.
  • Ability to evaluate AI-generated outputs for accuracy, completeness, and alignment with source information.
  • Strong written and verbal communication skills for translating technical concepts into customer-ready content.
  • Ability to work independently, manage multiple priorities, and operate in a fast-paced environment.
  • Experience supporting customer security reviews, maintaining assurance content libraries, or auditing AI agents preferred.
  • Familiarity with security governance, risk, compliance, responsible AI practices, or technical artifacts such as data flow diagrams preferred.

Benefits

  • Remote-first work across the US, Canada, UK, and Germany, with team meetups and biannual destination summits.
  • Monthly stipend for coworking, phone, and internet costs.
  • Stock options upon hire and promotion, secondary offering participation, and a 10-year exercise window.
  • 100% company-paid health, vision, and dental insurance for employees and dependents.
  • Flexible time off.
  • Paid parental leave: 18 weeks for birthing parents and 12 weeks for non-birthing parents.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Security Risk Analyst, GRC

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a Security Risk Specialist on its Global Governance, Risk and Compliance team to manage security risk assessments, treatment plans, reporting, exceptions, and proactive control improvement across DoorDash, Wolt, and Deliveroo.

1 day, 4 hours ago

Cyber Security Analyst

World Business Lenders 251-1K Real Estate

World Business Lenders is seeking an entry-level Cybersecurity Engineer to protect systems, devices, and information across its fully remote multinational lending organization by monitoring security activity and strengthening security controls.

Cybersecurity Linux PowerShell Python SIEM
3 days, 4 hours ago

Security Operations Analyst (L1)

JustMarkets 1-10 Capital Markets

Join a fintech innovation team as a full-time Security Operations Analyst responsible for triaging security alerts, conducting initial investigations, and escalating potential incidents.

DNS HTTP Linux macOS PowerShell Python SIEM TCP/IP
5 days, 4 hours ago

Threat Hunter/Purple Team Operator

SIXGEN 51-250 Professional Services

SIXGEN is hiring a mid-level Threat Hunter / Purple Team Operator to hunt for threats, support red team engagements, and improve real-time defensive detection for government and critical-infrastructure customers.

Carbon Black Cybersecurity Elasticsearch PowerShell Python SIEM Splunk
1 week ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers