Principal Product Security Researcher leading threat research and product security strategy. Shaping secure, production - ready open - source software builds for Chainguard customers.
About the role
- Principal Product Security Researcher leading threat research and security strategy at Chainguard, a provider of hardened open-source software builds. Influencing product roadmaps and industry security practices.
Responsibilities
- Own Chainguard’s product security research agenda by scanning the broader ecosystem, identifying emerging attack patterns, and translating them into risks and opportunities.
- Shape security direction across products and platforms with Product, Engineering, and Security leadership.
- Drive industry agenda and discussion topics around security risks and priorities.
- Research emerging threats and trends in software supply chain and product security and analyze their impact on products and customers.
- Design pragmatic mitigations across people, process, and technology.
- Partner with executive and senior engineering leadership on organization-wide security strategy, roadmap decisions, and complex changes.
- Identify systematic weaknesses and develop durable root-cause remediation plans.
- Mentor and develop Product Security and Engineering team members.
- Balance stakeholder input and deliver value across functions.
- Represent Chainguard externally through talks, conferences, and thought leadership.
Requirements
- Deep experience in product or application security, with a track record of leading research or threat-focused work that drove clear, company-level outcomes.
- Expert knowledge across multiple domains such as secure architecture, application/product security, software supply chain, and org-level risk management.
- Ability to balance security, velocity, and reliability.
- Ability to own ambiguous, cross-functional problems and turn them into structured, prioritized initiatives that ship and stick.
- Proven ability to present complex ideas to executive stakeholders, gain alignment, and drive decision-making at the highest levels.
- Current knowledge of industry trends, tooling, and research methods, with the ability to apply them pragmatically.
- Ability to work independently with high ownership and collaborate generously.
- Comfort working in fast-evolving, uncertain contexts and building structure.
Benefits
- Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
- Stock options upon hire and promotion
- Participation in secondary offerings
- 10 years to exercise stock options
- 100% covered health, vision and dental insurance premiums for the employee and dependents
- Unlimited flexible time off
- 18 weeks paid parental leave for birthing parents and 12 weeks for non-birthing parents
- Option to use parental leave all at once or throughout the child's first year
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Principal Product Security Researcher shaping threat research and security strategy for Chainguard’s hardened open - source software. Influencing product roadmaps, mitigating supply - chain risks, and advancing industry security practices.
Endpoint security engineer designing and operating enterprise protection for TD, a major North American bank. Leading security platforms, technical initiatives, and a small engineering team.
Hybrid offensive and defensive security advisor protecting Desjardins systems, networks, and applications. Investigating incidents, assessing vulnerabilities, and recommending mitigation measures.
Cybersecurity adjunct faculty teaching CSIA 300 asynchronously for University of Maryland Global Campus. Mentoring adult learners and supporting their academic and professional growth.
AI Security Sales Executive selling Abnormal’s AI security suite to enterprise customers in Canada. Owning quota, new - logo hunting, upsells, and technical security sales cycles.
Cyber resilience lead designing red - team testing and offensive security programs for EQ Bank, Canada’s challenger bank. Driving penetration testing, threat simulations, control effectiveness, and security roadmaps.
Cybersecurity Advisor guiding BMO banking teams through security governance, controls, and technology change. Coordinating reviews, approvals, risk remediation, and stakeholder engagement.
Security Engineer protecting Mysten Labs’ decentralized blockchain infrastructure and Sui ecosystem. Owning bug bounties, audits, supply - chain security, and anti - abuse tooling.
Security Engineer designing controls for Kinaxis’s AI - powered supply - chain orchestration platform and corporate IT environments. Leading cloud security, vulnerability remediation, detection, and incident response.