Chainguard
Principal Product Security Engineer
Canada - Remote +1 · Remote · Principal · Full-time · Posted Oct 23, 2026
- Location
- Canada - Remote
Remote - US - Experience
- 10+ years
About the job
Sets product security strategy and leads cross-functional initiatives to reduce risk across Chainguard’s products and platforms.
What you'll do
- Define security guardrails for AI-assisted development and embed security by design in product and engineering work.
- Lead programs for secure SDLC, vulnerability reduction, remediation automation, and security assurance.
- Advise senior leaders, mentor security engineers, and translate threats and compliance frameworks into practical controls.
What they ask for
- 10+ years in software, product, or application security, owning complex products or platforms.
- Deep expertise in secure architecture and system design for cloud-native or distributed systems.
- Experience driving organization-wide security programs and risk management from design through rollout.
- Hands-on cloud-native security experience, compliance-framework experience, and ability to automate workflows in at least one language and integrate them into CI/CD.
Nice to have
- Background in software supply-chain security, including SBOMs, SLSA, provenance, signing, or build-system hardening.
- Experience in red-teaming or offensive security, open-source development, security-community participation, or high-growth companies.
Tools
containers, Kubernetes, Go, Python, Shell, CI/CD, STIGs/CIS baselines, policy-as-code
AI focus
Define security guardrails for AI-assisted development across design, coding, testing, review, deployment, and operations; drive AI SDLC security programs.
Model-written summary · the original posting is authoritative