Senior/Staff Security Engineer, Chainguard
$140-210k
+ Equity + Stock options
Software supply chain security company
Open for applications
Software supply chain security company
21-100 employees
Open for applications
$140-210k
+ Equity + Stock options
21-100 employees
Company mission
To make the software supply chain secure by default.
Role
Who you are
- A successful candidate will possess a strong technical background, excellent problem-solving abilities, and relentless curiosity
- Bachelor’s of Science degree in Computer Science, Engineering, Computer Security, Information Systems
- 5+ years of experience in software development, security, or relevant field
- Experience securing Cloud-native environments
- Experience with endpoint detection and response
- Familiarity with macOS or Linux security controls
- Familiarity with security frameworks such as SOC 2, ISO 27001, and NIST
- Ability to craft automation with languages such as Go, Python, or Shell
- Experience with red-teaming or open-source software development
- Strong interpersonal and communication skills
- Ability to work independently across multiple simultaneous work streams
What the job involves
- As a Security Engineer, your role will be to enable Chainguardians to do their best work through collaborative low-friction Information Security
- You will work closely with the IT/Security team and collaborate with teams across the company to improve our security posture and ensure compliance with industry standards and regulations
- Design and deploy innovative technical controls to detect and prevent security incidents
- Collaborate across teams to integrate security best practices into products and processes
- Keep Chainguard compliant across multiple security frameworks
- Fill out security questionnaires for prospective customers
- Lead incident response efforts, including tabletop exercises
- Conduct security assessments and penetration tests
- Maintain detection and response automation
- Research the latest security threats
Our take
Developers rely on open source code and apps in their day to day work, but when the provenance of the code is unknown this creates potential weaknesses that cybercriminals can exploit. Chainguard exists to build security into the coding supply chain by making it possible for companies to enforce security policies based on auditable signatures baked into the code, and by providing a security-first set of container images with no known vulnerabilities for cloud app developers.
In the wake of huge cyber attacks like the Log4j vulnerability and Solarwinds breach, software supply chain security has been an area of major focus for startups hoping to solve problems in this sector. However, most of these focus on scanning and detection of threats. Chainguard's approach comes from the other end of the process, focusing on building security into the software itself.
Built by former Google engineers, Chainguard is aware of the existing workload (and oversized toolkit) of software developers and so is designed to be easily installed and to integrate with existing automation systems like Terraform.
Chainguard completed a Series A funding round led by Sequoia Capital in mid-2022. It is using this funding to develop its product and hire additional talent. It is also investing in open-source projects aligned with its mission and establishing a free education program to teach developers about supply chain security.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
55% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Jul 2024
$140m
SERIES C
Nov 2023
$61m
SERIES B
Total funding: $256m
Company benefits
- Equity/stock options
- Unlimited PTO
- Remote work with flexible coworking and team meetup opportunities
- Home office and internet stipend
- 100% health/dental/vision insurance coverage for you and your family
Company values
- Fun. Everything goes easier when we’re having fun! We do serious work, but we try not to take ourselves too seriously
- We have a Bias for Action. We’re a startup and we need to move fast. Speed is our friend!
- We are Customer Obsessed. We intently listen to their needs and value their feedback
- Open Source Excellence is key. OSS is a component of every software supply chain, and OSS is required to improve supply chain security
- Trust and Reputation. This one has two parts! We’re a security company, and our reputation is critical. Also, we hire great team members and trust them to do their work. We’re transparent with data, news, and decisions, to empower our team members to make the correct decisions
Company HQ
Everest, Kirkland, WA
Articles
Leadership
Dan Lorenc
(Co-founder & CEO)Before co-founding Chainguard was a Software Engineer at Google, Disqus and Microsoft.
Kim Lewandowski
(Co-founder & Head of Product)Prior to co-founding Chainguard was a Product Manager with Google. Before that was the Head of Product & Engineering at Brit + Co and the founder of Spotwag.
Matthew Moore
(Co-founder & CTO)Was a Software Engineer at VMware, Google and Microsoft.
Ville Aikas
(Co-founder)Was a Senior Staff Engineer at VMware and a Software Engineer for Google and the University of Washingtom. Was previously Owner at VA Systems.
Share this job
View 16 more jobs at Chainguard