Senior Product Security Engineer

Overview

Senior Product Security Engineer responsible for embedding security into software delivery and cloud-native product development. The role focuses on secure pipelines, software supply chain controls, Kubernetes hardening, and cloud security.

What you'll do

• Build and maintain secure CI/CD pipelines with security gates.
• Capture product risk exposure systematically and automatically.
• Implement software supply chain controls for signed artifacts, SBOMs, and provenance attestations.
• Lead security architecture reviews and threat models for Kubernetes workloads.
• Harden container images, Kubernetes configurations, and cloud IAM postures.
• Drive adoption of pod security, network policy, workload identity, and secrets management standards.

What you'll need

• 5+ years of software engineering or security engineering experience with hands-on security responsibility.
• Production-quality coding proficiency in Go or Python.
• Production Kubernetes experience including cluster hardening, RBAC, network policies, and admission controllers.
• Practical GCP and/or AWS experience with IAM, workload identity, secrets management, and security services.
• Experience designing and securing CI/CD pipelines using GitHub Actions, Cloud Build, Tekton, or similar tools.
• Experience with container security and software supply chain tooling such as Sigstore, SLSA, and SBOM generation.
• Understanding of OWASP, NIST, and cloud security frameworks.

Nice to have

• Familiarity with Chainguard Images or other hardened container base image ecosystems.
• Experience with OPA, Kyverno, or Conftest.
• Contributions to open source security projects.
• Security research or offensive security experience.

Details

• Remote in Canada.