Principal Product Security Researcher

This is a fully remote position, open to applicants in Canada, +2 more countries.

📋 Description

• Take charge of Chainguard’s product security research initiatives by analyzing the wider ecosystem, recognizing emerging attack trends, and converting them into risks and opportunities.

• Influence the security strategy across products and platforms in collaboration with Product, Engineering, and Security leadership.

• Lead discussions and set agendas in the industry concerning security risks and priorities.

• Investigate new threats and trends in software supply chains and product security, assessing their implications for products and customers.

• Create practical mitigations involving people, processes, and technology.

• Collaborate with executive and senior engineering leaders on security strategy, roadmap planning, and complex organizational changes.

• Detect systemic vulnerabilities and devise sustainable root-cause remediation strategies.

• Guide and develop members of the Product Security and Engineering teams.

• Balance stakeholder feedback to deliver value across various functions.

• Represent Chainguard publicly through presentations, conferences, and thought leadership.

⛳️ Requirements

• Extensive experience in product or application security, demonstrating a history of leading research or threat-focused initiatives that delivered significant outcomes at the company level.

• In-depth expertise in various domains, including secure architecture, application/product security, software supply chain, and organizational risk management.

• Capability to balance security, speed, and reliability effectively.

• Proficient in managing ambiguous, cross-functional challenges and transforming them into structured, prioritized projects that are executed successfully.

• Proven skill in communicating complex concepts to executive stakeholders, achieving consensus, and facilitating decision-making at the highest levels.

• Up-to-date knowledge of industry trends, tools, and research methodologies, with the ability to apply them in a practical manner.

• Ability to work autonomously with a strong sense of ownership while also collaborating generously with others.

• Comfortable navigating fast-paced, uncertain environments and establishing structure.

🏝️ Benefits

• Flexible & Remote-First Culture: Enjoy the flexibility of remote work with opportunities for team meetups, bi-annual destination summits, and a monthly stipend covering coworking spaces, phone, and internet expenses.

• Stock options available upon hiring and promotion.

• Opportunities to participate in secondary offerings.

• A full 10 years to exercise stock options.

• 100% coverage of health, vision, and dental insurance premiums for employees and their dependents.

• Unlimited flexible time off.

• 18 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents.

• Option to take parental leave all at once or spread it out over the child's first year.