RemoteLeaf Logo
Log in Sign up

Staff Vulnerability Management Engineer

5 hours, 17 minutes ago
United States
Full-time
Lead
Security Engineer
DevOps and Infrastructure
Go Java JavaScript Penetration Testing Python
Apply Now
Chainguard

Chainguard

Chainguard: Fortified Software Delivery Security for developers and CISOs, ensuring secure by default infrastructure and zero workflow friction.

Internet Software & Services
51-250
Founded 2021
$55M raised
View All Jobs 70

Description

  • Own the measurement, disclosure, and reporting of a high-volume pipeline of novel vulnerabilities identified weekly from frontier models and other sources.
  • Calibrate the vulnerability response process as emerging trends change.
  • Manage reporting of newly discovered vulnerabilities to upstream projects and maintainers.
  • Run the CNA program and assign new CVEs where necessary.
  • Coordinate internal and external embargoes with customers, engineering teams, and external maintainers.
  • Work with the Linux Foundation, CISA, and other bodies to coordinate actions and responses.
  • Guide industry direction so Chainguard customer needs are reflected in emerging standards and norms.
  • Represent Chainguard externally as a visible leader in its vulnerability management efforts.
  • Work with AI model vendors to influence the future evolution of software supply chain security.

Requirements

  • 7+ years of experience in software security, open source maintenance, or vulnerability disclosure management.
  • Strong understanding of responsible disclosure.
  • Practical expertise automating pipelines and processes at large scale to reduce human-in-the-loop work.
  • Deep experience with open source communities.
  • Experience coordinating with public sector or industry standards bodies and working groups.
  • Established thought leadership in vulnerability disclosure management and embargoes (preferred).
  • Familiarity with Chainguard Images or other minimal/hardened container base image ecosystems (preferred).
  • Experience operating a CNA (preferred).
  • Software engineering background in Python, Java, JavaScript, Go, or similar languages (preferred).
  • Background in security research, pen testing, or bug bounties (preferred).

Benefits

  • Base salary range of $170,000 to $231,000 USD.
  • Flexible, remote-first work culture with team meetup opportunities and bi-annual destination summits.
  • Monthly stipend for coworking spaces, phone, and internet costs.
  • Stock options upon hire and promotion, with secondary offering participation and 10 years to exercise options.
  • 100% covered health, vision, and dental insurance for employees and dependents.
  • Unlimited flexible time off.
  • 18 weeks paid parental leave for birthing parents and 12 weeks for non-birthing parents.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Unlimited Technology

Lead Traveling Security Technician

Unlimited Technology 51-250 Professional Services

Unlimited Technology is hiring a Traveling Security Technician for UT Government to install, service, test, and inspect access control and IP camera systems for customers across the U.S.

United States Full-time Lead Security Engineer
$65k-$90k
5 hours, 17 minutes ago
True Zero Technologies

Identity Management Engineer / Architect (R-00197)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking an Identity Management Engineer / Architect to design and operate a secure enterprise identity platform across on-premises, cloud, SaaS, and hybrid environments in support of Zero Trust and regulated government use cases.

Anywhere Full-time Senior Cloud Engineer Security Engineer
Active Directory Cybersecurity DevSecOps OAuth OpenID Connect PowerShell Python SAML Terraform
5 hours, 17 minutes ago
True Zero Technologies

PKI / Certificate Management Engineer (R-00198)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is hiring a PKI / Certificate Management Engineer to design and operate enterprise certificate infrastructure across cloud, government, and hybrid environments.

Anywhere Full-time Senior Infrastructure Engineer Security Engineer
Encryption Linux TLS
5 hours, 17 minutes ago
True Zero Technologies

Endpoint Engineer - AI Desktop Deployment (R-00193)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is hiring an Endpoint Engineer – AI Desktop Deployment to design and support secure Windows endpoints for AI-enabled desktop use in regulated government and Zero Trust environments.

Anywhere Full-time Senior Security Engineer Systems Administrator
AWS PowerShell SIEM
5 hours, 32 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers