RemoteLeaf Logo
Log in Sign up

Senior Product Security Engineer

1 month, 1 week ago
United Kingdom
Full-time
Lead
Application Security Engineer
Cybersecurity
AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
Apply Now
Chainguard

Chainguard

Chainguard: Fortified Software Delivery Security for developers and CISOs, ensuring secure by default infrastructure and zero workflow friction.

Internet Software & Services
51-250
Founded 2021
$55M raised
View All Jobs 53

Description

  • Design, build, and maintain secure CI/CD pipelines with security gates that prevent issues from reaching production.
  • Systematically capture and track the risk exposure of Chainguard's products.
  • Implement and enforce software supply chain security controls, including signed artifacts, SBOMs, and provenance attestation.
  • Identify emerging customer security needs and build solutions to address them.
  • Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
  • Harden container images, Kubernetes cluster configurations, and cloud IAM postures to reduce attack surface.
  • Define baseline security standards for pod security, network policies, workload identity, and secrets management.
  • Evaluate and operationalize CNAPP/CSPM tooling to maintain continuous visibility into cloud-native risk.
  • Provide technical leadership and cross-team influence as an individual-contributor Staff engineer.

Requirements

  • 7+ years of experience in software engineering, security engineering, or a combined role with significant hands-on security responsibility.
  • Strong proficiency in Go or Python, with the ability to write, review, and debug production-quality code.
  • Deep hands-on experience with Kubernetes in production, including cluster hardening, RBAC, network policies, and admission controllers.
  • Practical experience with GCP and/or AWS, including IAM, workload identity, secrets management, and security services such as GCP Security Command Center or AWS Security Hub.
  • Proven experience designing and securing CI/CD pipelines using GitHub Actions, Cloud Build, Tekton, or similar tools.
  • Fluency with container security, including image scanning, distroless or minimal base images, and runtime security.
  • Experience with software supply chain security tooling and frameworks such as Sigstore, SLSA, and SBOM generation.
  • Solid understanding of OWASP, NIST, and cloud security frameworks and how to apply them pragmatically.
  • Familiarity with Chainguard Images or other minimal/hardened container base image ecosystems is preferred.
  • Experience with policy-as-code tools such as OPA, Kyverno, or Conftest is preferred.
  • Contributions to open source security projects are preferred.
  • Background in security research or offensive security, such as bug bounty, CTFs, or penetration testing, is preferred.

Benefits

  • Flexible, remote-first work environment with team meetup opportunities and bi-annual destination summits.
  • Monthly stipend for coworking spaces, phone, and internet costs.
  • Stock options upon hire and promotion, with participation in secondary offerings and 10 years to exercise options.
  • 100% company-paid health, vision, and dental insurance for employees and dependents.
  • Unlimited flexible time off.
  • 18 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

DefenseUnicorns

Platform Engineer - Navy (FedD174/FedD175)

DefenseUnicorns 51-250 Internet Software & Services

Defense Unicorns is hiring a Platform Engineer for its Navy Delivery team to support secure platform, DevOps, and application security work for U.S. government missions.

United States Full-time Lead Application Security Engineer Platform Engineer
$149k-$201k
Agile AWS CI/CD GitOps Go Helm Kubernetes Linux Pulumi Unix YAML
18 hours, 3 minutes ago
Anduril Industries

Product Security Engineer

Anduril Industries 1K-5K Aerospace & Defense

Anduril Industries is hiring a Product Security Engineer in the UK to secure advanced defense technologies, including AI systems, command and control platforms, aerospace vehicles, and long-range sensors.

United Kingdom Full-time Senior Application Security Engineer
C C++ Cybersecurity Embedded Systems Go IoT Linux Network Security Python Rust
1 day, 18 hours ago
M

Applications Security Specialist

Marathon Talent 1-10 Human Resources

R2 is hiring an Application Security Engineer to help secure its fintech platform and infrastructure as it expands financial services for SMBs across Latin America.

Argentina Full-time Mid Level Application Security Engineer
Burp Suite CI/CD Go Kubernetes Microservices Penetration Testing
1 day, 18 hours ago
Rackner

Application Security Engineer — Secure Mission Systems

Rackner 11-50 Internet Software & Services

Rackner is hiring a remote Application Security Engineer to strengthen secure software for Department of Defense mission systems through hands-on testing, vulnerability remediation, and secure delivery support.

United States Full-time Senior Application Security Engineer
CI/CD Git GitLab Kubernetes OpenShift
2 days, 17 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers