Chainguard

Full-stack Engineer

• Set the technical direction for the Athena clearing house by making the hard architectural calls on data validation pipelines, customer entitlement systems, workflow orchestration, upstream reconciliation, OSV publication, and coalition interfaces. Scale the team and the product area.
• Define and drive the transition from rapid prototyping to a sustainable, production-grade product stack including observability, incident handling, and operational rigor
• Partner with staff engineers to establish domain ownership and technical standards across the team
• Lead the design of systems that process unstructured vulnerability reports from enterprise customers, deduplicate findings, and surface clean signals to the libraries remediation team
• Identify and retire technical debt introduced during the team's high-velocity prototyping phase
• Serve as a thought partner on build-vs-buy decisions, capacity planning, and long-term architectural bets
• Contribute to a hiring bar that brings in engineers who can sustain serious output without burning out

Principal Software Engineer

• Long-term ownership of a significant domain within the clearing house: customer onboarding workflows, entitlement management, or data validation pipelines
• Drive the architecture and implementation of backend systems in Go on GCP, ensuring they're production-ready: tested, observable, and maintainable
• Lead the design of data pipelines that ingest unstructured vulnerability reports, deduplicate findings, and produce clean structured outputs
• Establish and model engineering best practices for the team: code review standards, testing, incident response
• Partner closely with the principal engineer and manager on technical planning, architecture alignment and roadmap sequencing
• Collaborate with the libraries team on interface contracts and data quality requirements

Staff Software Engineer

• Own moderately complex backend features and services in Go on GCP end-to-end from design through production with support as needed.
• Write clean, tested, production-ready code and improve it when you find things that don't meet that bar
• Work within data ingestion and validation workflows, learning the patterns for handling unstructured enterprise data
• Participate in code review, both giving and receiving direct, constructive feedback
• Contribute to infrastructure and configuration work using Terraform with support from senior engineers
• Support operational work by contributing to observability tooling, documentation, and on-call preparation as you grow into the role

Software Engineer

• Build and maintain core components of the clearing house in Go on GCP including customer onboarding flows, entitlement logic, and data ingestion pipelines
• Take on ownership of ambiguous problems and specific features or subsystems, driving them from design through production with appropriate testing and observability
• Work closely with staff and principal engineers to implement architectural patterns that scale
• Write backend systems that handle unstructured data inputs from enterprise customers and produce structured, validated outputs
• Participate in on-call rotation and contribute to incident response and postmortems
• Become a go-to engineer for one or more core subsystems, leading multi-engineer efforts over a multi-month horizon
• Review code, give direct feedback, and raise the team's engineering bar
• Contribute infrastructure-as-code and operational tooling using Terraform and GCP-native tooling

Senior Software Engineer

Customer Support

• Own the L2/L3 escalation boundary: define routing criteria, review escalation quality, and drive down unnecessary L3 load without increasing customer time-to-resolution.
• Maintain and improve escalation intake workflows including triage standards, ticket hygiene, and handoff artifacts for engineering partners.
• Track escalation health metrics and report on trends to engineering leadership; identify capacity risks in eng teams before they become bottlenecks.
• Run escalation retrospectives to close the loop on resolution patterns and feed signal back into product and documentation.
• Manage, coach, support and develop the AMER Technical Support Engineering team, with direct attention to technical depth and debugging rigor.
• Operate career leveling frameworks for IC growth (L1 through L6); hold bar on promotions and ensure growth plans are actionable.
• Coordinate AMER handoffs with APAC and EMEA peer managers to maintain follow-the-sun coverage quality: clear ownership at every handoff, with uninterrupted SLA performance.
• Identify and close skill gaps proactively, particularly in Linux fundamentals, container security, and Kubernetes ecosystems.
• Own the support tooling stack including ticketing systems, AI-assisted triage, and deflection tooling.
• Partner with engineering to build and maintain LLM-assisted workflows for escalation intake, ticket quality review, and knowledge retrieval.
• Drive adoption of AI tooling across the team; know where automation adds leverage and where it introduces risk.
• Use support data to surface product quality signals and operational trends to engineering and product leadership.
• Serve as the primary interface between Technical Support Engineering and product engineering teams for escalated issues.
• Maintain a functional relationship with Customer Success and GTM without allowing those teams to define support quality standards or escalation criteria.
• Contribute to product feedback loops through reproducible, well-scoped bug reports and actionable pattern analysis.

Customer Support Manager

• Architect the automation platform: Design the end-to-end system that orchestrates package creation, test generation, and image building. Own the technical vision and make decisions that will scale.
• Build AI-powered tooling: Develop LLM-integrated, agentic pipelines for manifest generation, test scaffolding, and validation. Design prompt architectures, evaluation loops, and quality gates.
• Write production Go: This is a hands on role! You'll develop CLI tools, services, and integrations alongside your team.
• Build quality tooling: Develop tooling and automation that improves customer reliability, including test generators, validation frameworks, and quality gates.
• Shape the roadmap: Collaborate with engineering leadership to identify the highest-impact problems and ensure they get solved. Participate in long-term planning for the organization.

Senior Software Engineer – Sustaining Automation

Security Engineer

• Design, build, and maintain secure CI/CD pipelines with security gates that catch issues before they reach production.
• Systematically, consistently and automatically capture the risk exposure of Chainguards products.
• Implement and enforce software supply chain security controls: signed artifacts, SBOMs, provenance attestation (SLSA, Sigstore / Cosign).
• Proactively identify emerging customer security needs, and build solutions to meet these.
• Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
• Harden container images, Kubernetes cluster configurations, and cloud IAM postures — minimising attack surface across our product stack.
• Define and drive adoption of baseline security standards: pod security standards, network policies, workload identity, secrets management.
• Evaluate and operationalise CNAPP / CSPM tooling to maintain continuous visibility into cloud-native risk.

Senior Product Security Engineer

• Continuously monitor Claude and ChatGPT product roadmaps, release notes, and vendor communications to anticipate platform changes before they land
• Translate upcoming features into proactive configuration, policy, and enablement decisions not reactive scrambles
• Maintain active relationships with Anthropic and OpenAI account teams; flag ToS updates, data processing agreement changes, and acceptable use policy shifts before they become surprises
• Provide expert-level administration of AI console environments across both platforms
• Manage Claude and ChatGPT organizational settings files using Git, version-controlled, reviewed, and deployed like the infrastructure they are
• Own API key lifecycle management and secrets hygiene for all AI integrations
• Manage SSO/SCIM provisioning for AI platforms; ensure access is tight, auditable, and clean
• Develop token tracking and financial dashboards so leadership actually knows what AI costs us by team, by use case, by month
• Build anomaly detection on AI spend; if something spikes, you catch it before accounting does
• Produce regular usage trend reports and ROI framing for leadership that goes beyond "we use AI a lot"
• Build and maintain internal MCP servers that extend AI capabilities into our workflows securely
• Be the in-house subject matter expert on agentic AI builds such as architecture, risk, failure modes, and the parts that go sideways in ways no one anticipated
• Identify and mitigate prompt injection risks in internal AI-powered tools
• Ensure no sensitive or regulated data (PII, PCI, PHI) flows into AI prompts. Architect the guardrails, not just the policy
• Maintain awareness of AI-specific incident response options; when something goes wrong with an AI integration, you're in the room
• Serve as IT Engineering's primary liaison to the AI Adoption Committee bringing operational grounding to adoption decisions
• Participate actively in the AI Working Group; connect platform capabilities to how the company actually uses them
• Partner closely with the Governance & Trust team, who leads AI policy and governance. Your job is to be their technical counterpart by implementing, informing, and flagging issues, not owning the policy itself

Senior Security Engineer, AI Platform

• Continuously monitor Claude and ChatGPT product roadmaps, release notes, and vendor communications to anticipate platform changes before they land
• Translate upcoming features into proactive configuration, policy, and enablement decisions not reactive scrambles
• Maintain active relationships with Anthropic and OpenAI account teams; flag ToS updates, data processing agreement changes, and acceptable use policy shifts before they become surprises
• Provide expert-level administration of AI console environments across both platforms
• Manage Claude and ChatGPT organizational settings files using Git, version-controlled, reviewed, and deployed like the infrastructure they are
• Own API key lifecycle management and secrets hygiene for all AI integrations
• Manage SSO/SCIM provisioning for AI platforms; ensure access is tight, auditable, and clean
• Develop token tracking and financial dashboards so leadership actually knows what AI costs us by team, by use case, by month
• Build anomaly detection on AI spend; if something spikes, you catch it before accounting does
• Produce regular usage trend reports and ROI framing for leadership that goes beyond "we use AI a lot"
• Build and maintain internal MCP servers that extend AI capabilities into our workflows securely
• Be the in-house subject matter expert on agentic AI builds such as architecture, risk, failure modes, and the parts that go sideways in ways no one anticipated
• Write code. Python and/or TypeScript. AI-augmented is fine (encouraged, even), but you need to own what ships
• Identify and mitigate prompt injection risks in internal AI-powered tools
• Ensure no sensitive or regulated data (PII, PCI, PHI) flows into AI prompts. Architect the guardrails, not just the policy
• Maintain awareness of AI-specific incident response options; when something goes wrong with an AI integration, you're in the room
• Serve as IT Engineering's primary liaison to the AI Adoption Committee bringing operational grounding to adoption decisions
• Participate actively in the AI Working Group; connect platform capabilities to how the company actually uses them
• Partner closely with the Governance &amp; Trust team, who leads AI policy and governance. Your job is to be their technical counterpart by implementing, informing, and flagging issues, not owning the policy itself

Senior Security Engineer – AI Platform

• Design, build, and maintain secure CI/CD pipelines with security gates that catch issues before they reach production.
• Systematically, consistently and automatically capture the risk exposure of Chainguard's products.
• Implement and enforce software supply chain security controls: signed artifacts, SBOMs, provenance attestation (SLSA, Sigstore / Cosign).
• Proactively identify emerging customer security needs, and build solutions to meet these.
• Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
• Harden container images, Kubernetes cluster configurations, and cloud IAM postures — minimising attack surface across our product stack.
• Define and drive adoption of baseline security standards: pod security standards, network policies, workload identity, secrets management.
• Evaluate and operationalise CNAPP / CSPM tooling to maintain continuous visibility into cloud-native risk.

• Design, build, and maintain secure CI/CD pipelines with security gates that catch issues before they reach production.
• Systematically, consistently and automatically capture the risk exposure of Chainguards products.
• Implement and enforce software supply chain security controls: signed artifacts, SBOMs, provenance attestation (SLSA, Sigstore / Cosign).
• Proactively identify emerging customer security needs, and build solutions to meet these.
• Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
• Harden container images, Kubernetes cluster configurations, and cloud IAM postures — minimise attack surface across our product stack.
• Define and drive adoption of baseline security standards: pod security standards, network policies, workload identity, secrets management.
• Evaluate and operationalise CNAPP / CSPM tooling to maintain continuous visibility into cloud-native risk.

• Collaborate with teammates and cross-functional teams to design innovative services and features that enhance the core product, making it more compelling and valuable.
• Develop robust tools and services to continue to improve our image build system as it scales.
• Own high-impact, deeply technical components of the Chainguard stack, serving as the subject matter expert in those areas
• Participate in long-term planning and roadmap discussions, helping identify the key problems the team needs to solve and ensuring they get solved
• Mentor engineers and raise the bar for engineering quality across the organization

Principal Software Engineer

Staff Software Engineer

Staff Software Engineer

Software Engineer

Software Engineer

Senior Software Engineer

Senior Software Engineer

Customer Support Manager

Senior Software Engineer – Sustaining Automation

Senior Product Security Engineer

Senior Security Engineer, AI Platform

Senior Security Engineer – AI Platform

Senior Product Security Engineer

Senior Product Security Engineer

Staff Software Engineer – Guarded Containers