Staff Vulnerability Management Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of the assessment, transparency, and reporting of a pipeline consisting of thousands of novel vulnerabilities identified weekly through frontier models and additional sources.

• Adjust the response strategy in line with emerging trends.

• Oversee the reporting of newly identified vulnerabilities to upstream projects and maintainers.

• Operate the CNA program to assign new CVEs when necessary.

• Facilitate internal and external embargoes with clients, internal engineering teams, and external maintainers.

• Collaborate with the Linux Foundation, CISA, and other entities to synchronize actions and responses.

• Directly influence industry progression to ensure that emerging standards and norms align with the needs of Chainguard customers.

• Serve as Chainguard's external representative, embodying its industry-leading initiatives.

• Collaborate with AI model vendors to steer the future development of the software supply chain.

⛳️ Requirements

• Over 7 years of experience in software security, open source maintenance, or vulnerability disclosure management.

• Comprehensive understanding of responsible disclosure practices.

• Hands-on experience in automating pipelines and processes for large-scale operations, minimizing human involvement.

• Extensive experience within open source communities.

• Background in coordinating efforts with public sector or industry standards organizations and working groups.

🏝️ Benefits

• Flexible & Remote-First Culture: Enjoy the flexibility of remote work with team meetups, bi-annual destination conferences, and a monthly allowance for coworking spaces, phone, and internet expenses.

• Receive stock options upon hiring and promotion.

• Engage in secondary offerings with a 10-year period to exercise your options.

• Comprehensive health, vision, and dental insurance premiums fully covered for you and your dependents.

• Unlimited flexible time off.

• 18 weeks of paid parental leave for birthing parents and 12 weeks for non-birthing parents.

• Option to utilize parental leave all at once or spread it throughout the child's first year.