Manager of Product Security, Chainguard
$184-210k
Receive stock options upon hire and promotion
Software supply chain security company
Job no longer available
Software supply chain security company
201-500 employees
Job no longer available
$184-210k
Receive stock options upon hire and promotion
201-500 employees
Company mission
To make the software supply chain secure by default.
Role
Who you are
- Secure Coding and DevSecOps Initiatives: Experience in implementing and leading DevSecOps initiatives, frameworks, and tools used for SCA, SAST, CNAPP, threat enrichment, etc
- Agile Methodologies: Experience with Agile development/Scrum methodologies and incorporating security requirements into the SDLC (CI/CD) with product owners
- Programming and Deployment: Experience in managing programs supporting secure code and software deployments in various languages (Python, Node.js, C#, .NET, JavaScript, Go, Ruby, GraphQL, SDK, and RESTful API design/development)
- Technical Expertise and Industry Standards Knowledge: Extensive experience in secure code reviews, business logic assessments, and application security testing. Deep understanding of network, data, and cloud security principles; and Expert knowledge of security principles, standards, and best practices, such as OWASP, NIST, FedRAMP, ISO, etc
- You have 10+ years of software or security engineering experience, including supporting multiple teams and complex org-wide initiatives
- You can lead projects, mentor team members, and provide technical leadership
What the job involves
- As a manager for the Product Security team, you will lead and grow Chainguard’s Product Security practice, ensuring that all Chainguard products are designed, built and operated with security at their core
- You will manage a team of product security engineers, drive high-impact initiatives and work cross-functionally to integrate security measures into every phase of Chainguard’s software development life cycle through partnership with Engineering and Product
- Lead, manage, coach, and develop a team of Security professionals responsible for Product Security in all Chainguard products
- Lead Product Security initiatives, ensuring alignment with organizational goals and objectives
- Develop a broad and deep technical understanding of the services and architectures pertaining to Chainguard products
- Contribute to the short and long-term security strategy to ensure that products are designed and built securely by design while improving the secure software development life-cycle (SSDLC)
- Lead new, reoccurring, or ah-hoc security initiatives with end-to-end ownership
- Participate in security escalations
- Collaborate with product and engineering teams to ensure security is integrated into all aspects of the Chainguard products
- Design and deliver internal collateral, author internal processes,, and contribute to thought‑leadership content to deepen security fluency across Chainguard and among our customers
- Serve as an escalation point for critical security incidents and ensure timely remediation
Our take
Developers rely on open source code and apps in their day to day work, but when the provenance of the code is unknown this creates potential weaknesses that cybercriminals can exploit. Chainguard exists to build security into the coding supply chain by making it possible for companies to enforce security policies based on auditable signatures baked into the code, and by providing a security-first set of container images with no known vulnerabilities for cloud app developers.
In the wake of huge cyber attacks like the Log4j vulnerability and Solarwinds breach, software supply chain security has been an area of major focus for startups hoping to solve problems in this sector. However, most of these focus on scanning and detection of threats. Chainguard's approach comes from the other end of the process, focusing on building security into the software itself. It was built by former Google engineers aware of software developers existing workloads, so is designed to be easily installed and integrated into existing automation systems like Terraform.
Chainguard completed a Series C funding round led by Lightspeed Ventures in 2024, minting it as a new Unicorn on the cybersecurity scene. It is using this funding to expand its go-to-market internationally and expand its Chainguard Images product.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
55% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Apr 2025
$356m
SERIES D
Jul 2024
$140m
SERIES C
Total funding: $612m
Company benefits
- Equity/stock options
- Unlimited PTO
- Remote work with flexible coworking and team meetup opportunities
- Home office and internet stipend
- 100% health/dental/vision insurance coverage for you and your family
Company HQ
Everest, Kirkland, WA
Leadership
Dan Lorenc
(CEO & Co-Founder)Before co-founding Chainguard was a Software Engineer at Google, Disqus and Microsoft.
Kim Lewandowski
(Head of Product & Co-Founder)Prior to co-founding Chainguard was a Product Manager with Google. Before that was the Head of Product & Engineering at Brit + Co and the founder of Spotwag.
Matthew Moore
(CTO & Co-Founder)Was a Software Engineer at VMware, Google and Microsoft.
Ville Aikas
(Co-founder)Was a Senior Staff Engineer at VMware and a Software Engineer for Google and the University of Washingtom. Was previously Owner at VA Systems.
Share this job
View 26 more jobs at Chainguard