About the role

Principal Product Security Researcher shaping threat research and security strategy for Chainguard’s hardened open-source software. Influencing product roadmaps, mitigating supply-chain risks, and advancing industry security practices.

Responsibilities

Own the product security research agenda by scanning the broader ecosystem, identifying emerging attack patterns, and translating them into risks and opportunities for Chainguard and its customers.
Shape security direction across products and platforms with Product, Engineering, and Security leadership.
Drive industry agenda and discussion topics around security risks and priorities.
Research emerging threats and trends in software supply chain and product security and analyze their impact.
Design pragmatic mitigations across people, process, and technology.
Partner with executive and senior engineering leadership on organization-level security strategy, roadmap decisions, and complex changes.
Identify systematic weaknesses and develop root-cause remediation plans.
Mentor and develop colleagues across Product Security and Engineering.
Balance stakeholder input and deliver value across functions.
Represent Chainguard through talks, conferences, and thought leadership.

Deep experience in product or application security, with a track record of leading research or threat-focused work that drove clear, company-level outcomes.
Expert knowledge across multiple domains such as secure architecture, application/product security, software supply chain, and org-level risk management.
Ability to balance security, velocity, and reliability.
Ability to own ambiguous, cross-functional problems and turn them into structured, prioritized initiatives that ship and stick.
Proven ability to present complex ideas to executive stakeholders, gain alignment, and drive decision-making at the highest levels.
Current knowledge of industry trends, tooling, and research methods, with the ability to put them into practice pragmatically.
Ability to work independently with high ownership and collaborate generously.
Comfort working in fast-evolving, uncertain contexts and building structure.

Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
Receive stock options upon hire and promotion.
Participate in secondary offerings.
10 years to exercise stock options.
100% covered health, vision and dental insurance premiums for you and your dependents.
Unlimited flexible time off.
18 weeks paid parental leave for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout the child's first year.