Senior Product Security Engineer

Overview

Senior Product Security Engineer responsible for securing software delivery pipelines and cloud-native product infrastructure. The role focuses on CI/CD security, software supply chain controls, Kubernetes hardening, and cloud security across GCP and AWS.

What you'll do

• Design and maintain secure CI/CD pipelines with security gates.
• Capture product risk exposure systematically and automatically.
• Implement signed artifacts, SBOMs, and provenance attestations.
• Lead security architecture reviews and threat models for Kubernetes workloads.
• Harden container images, Kubernetes configurations, and cloud IAM.
• Drive adoption of pod security, network policy, workload identity, and secrets-management standards.

What you'll need

• 5+ years in software engineering, security engineering, or a combined role with hands-on security responsibility.
• Strong proficiency in Go or Python.
• Production experience with Kubernetes, including cluster hardening, RBAC, network policies, and admission controllers.
• Practical experience with GCP and/or AWS security, IAM, workload identity, and secrets management.
• Experience designing and securing CI/CD pipelines.
• Experience with container security and software supply chain tooling such as Sigstore, SLSA, and SBOM generation.
• Understanding of OWASP, NIST, and cloud security frameworks.

Nice to have

• Familiarity with Chainguard Images or other hardened container image ecosystems.
• Experience with OPA, Kyverno, or Conftest.
• Contributions to open source security projects.
• Security research or offensive security experience.

Details

• Remote role in the United States.
• Base salary: $157,000–$184,000 USD yearly.