Principal Product Security Researcher
Level inferred from job title
Job description
Principal Product Security Researcher leading Chainguard's product security research function, mapping emerging threats and turning insight into strategy across the product portfolio. The role partners with Product, Engineering, and Security leadership to embed findings into roadmaps and architecture decisions.
At a glance
- Work mode
- Remote · Canada
What you'll do
- Research emerging threats & trends in software supply chain and product security, and analyze their impact on Chainguard's products and customers
- Design creative mitigations across people, process, and technology into pragmatic defenses that actually get adopted
- Partner with executive and senior engineering leadership to drive org-level security strategy, influence key roadmap decisions, and secure buy-in for big, complex changes
- Identify systematic weaknesses (in systems, structures, and sometimes habits) and develop plans that fix root causes in ways that persist
- Mentor and uplevel others across Product Security and Engineering by helping teams think more strategically about threats, risk, and long-term security posture
- Take input and suggestions from across the organisation, balancing various stakeholders, and delivering value for different functions
- Represent Chainguard externally through talks, conferences, and thought leadership
What we're looking for
- Deep experience in product or application security, with a track record of leading research or threat-focused work that drove clear, company-level outcomes
- Expert knowledge across multiple domains such as secure architecture, application/product security, software supply chain, and org-level risk management, and ability to balance security, velocity, and reliability
- Comfortable owning ambiguous, cross-functional problems and turning them into structured, prioritized initiatives that ship and stick
- Proven ability to present complex ideas to executive stakeholders, gaining alignment and driving decision-making at the highest levels
- Stay at the cutting edge of industry trends, tooling, and research methods and put them into practice in a pragmatic way
- Work independently and with high ownership, while still being a generous collaborator who brings others along
- Comfortable in fast-evolving, uncertain contexts and can build structure
Your team
Product Security
Benefits
Flexible & Remote-First Culture: work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs
18 Weeks Paid Parental Leave: 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year
- Equity: stock options upon hire and promotion, participation in secondary offerings, and 10 years to exercise options
- 100% Covered Health Insurance: health, vision and dental insurance premiums for you and your dependents
- Flexible Time Off
Apply
About Chainguard
The trusted source for open source
Chainguard delivers hardened, secure, and production-ready builds of open source software engineers and AI agents rely on, helping organizations build faster, stay compliant, and eliminate risk.
Key facts
- Customers include Fortune 500 enterprises and global industry leaders
- Venture-backed by leading investors
Partners & customers
What they value
- We are customer obsessed
- We have a bias for intentional action
- We don't take ourselves too seriously (but we do serious work)
- We trust each other and assume good intentions