Lead Security Engineer
TimescaleFull Time
Senior (5 to 8 years)
Candidates should have 5+ years of experience in software development, security, or a related field. They should possess experience in identifying, developing, and integrating threat intelligence into detection engineering and preventative controls. Experience securing cloud-native environments, endpoint detection & response, macOS or Linux security controls, and security frameworks such as SOC 2, ISO 27001, and NIST are required. Familiarity with open source software or red-teaming is considered a plus.
The Senior Information Security Engineer will design and deploy innovative technical controls, lead incident response efforts including tabletop exercises, and integrate security best practices with product teams. Responsibilities include conducting security assessments and penetration tests, automating detection and response workflows using Go, Python, or Shell, and staying ahead of emerging security threats. The role also involves rotational on-call responsibilities.
Supply chain risk management and audits
Chainguard specializes in managing risks in supply chains, particularly for businesses that rely on software. They conduct audits to identify risks and provide detailed reports with recommendations for improvement. Their unique offering includes a curated base container image distro, which helps businesses transition to secure software environments. Chainguard also provides supply chain observability services, allowing companies to track their software's origins and dependencies.