Principal Product Security Researcher

This is a fully remote position, open to applicants in United Kingdom, +2 more countries.

📋 Description

• Lead the product security research agenda by exploring the wider ecosystem, pinpointing emerging attack patterns, and converting them into risks and opportunities for Chainguard and its clients.

• Influence security strategies across products and platforms in collaboration with Product, Engineering, and Security leadership.

• Propel industry discussions and topics concerning security risks and priorities.

• Investigate new threats and trends in software supply chain and product security, assessing their implications.

• Create practical mitigations that encompass people, processes, and technology.

• Collaborate with executive and senior engineering leaders on organization-wide security strategies, roadmap decisions, and complex transformations.

• Recognize systematic vulnerabilities and formulate root-cause remediation strategies.

• Guide and nurture team members across Product Security and Engineering.

• Balance stakeholder feedback while delivering value across various functions.

• Represent Chainguard at talks, conferences, and through thought leadership initiatives.

⛳️ Requirements

• Extensive experience in product or application security, demonstrating a history of leading research or threat-focused initiatives that produced significant company-wide outcomes.

• In-depth knowledge across several domains including secure architecture, application/product security, software supply chain, and organizational risk management.

• Capability to balance security, speed, and reliability effectively.

• Proven ability to take on ambiguous, cross-functional challenges and convert them into organized, prioritized initiatives that are successfully implemented.

• Demonstrated skill in presenting intricate ideas to executive stakeholders, achieving alignment, and driving decision-making at the highest levels.

• Up-to-date knowledge of industry trends, tools, and research methodologies, with the capability to apply them practically.

• Ability to work autonomously with a strong sense of ownership while also collaborating generously with others.

• Comfort in dynamic, uncertain environments while establishing structure.

🏝️ Benefits

• Flexible & Remote-First Culture: Work remotely with opportunities for team meetups, bi-annual destination summits, and a monthly stipend for coworking spaces, as well as phone and internet expenses.

• Receive stock options upon hiring and promotion.

• Participate in secondary offerings.

• 10 years to exercise stock options.

• 100% coverage of health, vision, and dental insurance premiums for you and your dependents.

• Unlimited flexible time off.

• 18 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents, with the flexibility to use it all at once or spread it throughout the child's first year.