Director of Product Security, Chainguard
$230-270k
Receive stock options upon hire and promotion
Software supply chain security company
Open for applications
Software supply chain security company
201-500 employees
Open for applications
$230-270k
Receive stock options upon hire and promotion
201-500 employees
Company mission
To make the software supply chain secure by default.
Role
Who you are
- Strong technical foundation — you’ve worked in software or security engineering roles (10+ years), and you’re still hands-on, able to dig into code, architecture, and tooling
- Experience leading secure coding and DevSecOps programs (SCA, SAST, CNAPP, threat modeling, the works)
- Deep understanding of Agile and CI/CD environments, and how to integrate security into fast-moving product teams without slowing them down.
- Programming experience across languages like Python, Node.js, C#, .NET, JavaScript, Go, Ruby, GraphQL, RESTful APIs (no need to be a wizard in all, but you can hold your own)
- Expertise in secure code reviews, business logic assessments, cloud security, and frameworks like OWASP, NIST, FedRAMP, ISO and you can explain why they matter in real-life situations
- A growth mindset: you’re proactive, always learning, and stay ahead of emerging threats and technologies
What the job involves
- If you’ve ever thought, “I want to build the kind of security program even engineers respect,” this is your moment
- We’re looking for a Director, Product Security who’s a deeply technical leader who can coach, code, review, architect, and jump into the weeds when needed
- Lead the team. You’ll manage, mentor, and develop a team of product security engineers, guiding them on everything from secure architecture to code reviews to threat modeling
- Be a technical backbone. You’re jumping into the work, offering technical guidance, reviewing complex issues, and collaborating closely with engineers and product teams
- Own major initiatives. You’ll drive everything from secure SDLC improvements to DevSecOps integrations, ensuring our products are locked down before they ever hit production
- Collaborate. You’ll work across Product, Engineering, and leadership teams building strong, trusted partnerships
- Be the cool-headed expert. When security incidents escalate, you’re the calm, technical leader who helps diagnose, prioritize, and resolve
- Elevate the bar. You’ll help design playbooks, build tools, and spread security knowledge across the company, so everyone knows how to build safer, smarter software
Our take
Developers rely on open source code and apps in their day to day work, but when the provenance of the code is unknown this creates potential weaknesses that cybercriminals can exploit. Chainguard exists to build security into the coding supply chain by making it possible for companies to enforce security policies based on auditable signatures baked into the code, and by providing a security-first set of container images with no known vulnerabilities for cloud app developers.
In the wake of huge cyber attacks like the Log4j vulnerability and Solarwinds breach, software supply chain security has been an area of major focus for startups hoping to solve problems in this sector. However, most of these focus on scanning and detection of threats. Chainguard's approach comes from the other end of the process, focusing on building security into the software itself. It was built by former Google engineers aware of software developers existing workloads, so is designed to be easily installed and integrated into existing automation systems like Terraform.
Chainguard completed a Series C funding round led by Lightspeed Ventures in 2024, minting it as a new Unicorn on the cybersecurity scene. It is using this funding to expand its go-to-market internationally and expand its Chainguard Images product.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
55% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Apr 2025
$356m
SERIES D
Jul 2024
$140m
SERIES C
Total funding: $612m
Company benefits
- Equity/stock options
- Unlimited PTO
- Remote work with flexible coworking and team meetup opportunities
- Home office and internet stipend
- 100% health/dental/vision insurance coverage for you and your family
Company HQ
Everest, Kirkland, WA
Leadership
Dan Lorenc
(CEO & Co-Founder)Before co-founding Chainguard was a Software Engineer at Google, Disqus and Microsoft.
Kim Lewandowski
(Head of Product & Co-Founder)Prior to co-founding Chainguard was a Product Manager with Google. Before that was the Head of Product & Engineering at Brit + Co and the founder of Spotwag.
Matthew Moore
(CTO & Co-Founder)Was a Software Engineer at VMware, Google and Microsoft.
Ville Aikas
(Co-founder)Was a Senior Staff Engineer at VMware and a Software Engineer for Google and the University of Washingtom. Was previously Owner at VA Systems.
Share this job
View 27 more jobs at Chainguard