Principal Product Security Researcher

<div class="content-intro"><p>Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk. <br><br>Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. <br><br>Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital.</p></div><p><strong>Principal Product Security Researcher</strong></p> <p><strong>Location: US, Canada, UK</strong></p> <p>Imagine a world where we’re not just reacting to the latest security headline, but shaping the future threat landscape so our customers sleep better at night (and so do we). </p> <p>As a <strong>Principal Product Security Researcher</strong> at Chainguard, you’ll lead our product security research function end-to-end: mapping emerging threats, turning insight into strategy, and helping Chainguard stay several moves ahead of attackers across our entire product portfolio.</p> <h2><strong>The role, in a nutshell</strong></h2> <p>Chainguard prioritizes our customers’ security above all else, which means preparing not just for the attacks of today, but for those of tomorrow as well. In this Principal-level role, you’ll:</p> <ul> <li>Own the product security research agenda for Chainguard scanning the broader ecosystem, identifying emerging attack patterns, and translating them into clear risks and opportunities for Chainguard and our customers.</li> <li>Shape security direction across products and platforms, partnering closely with Product, Engineering, and Security leadership to embed your findings into roadmaps, architecture decisions, and long-term plans.</li> <li>Drive the agenda and discussion topics across the whole industry, helping everyone to understand what is important, where the risks are, and why they should pay attention.</li> <li> </li> </ul> <p>If you enjoy turning ambiguous, fast-moving threat intel into concrete, multi-quarter plans that change how a company operates, this is your playground.</p> <h2><strong>What you’ll do:</strong></h2> <ul> <li>Research emerging threats & trends in software supply chain and product security, and analyze their impact on Chainguard’s products and customers.</li> <li>Design creative mitigations across people, process, and technology into pragmatic defenses that actually get adopted.</li> <li>Partner with executive and senior engineering leadership to drive org-level security strategy, influence key roadmap decisions, and secure buy-in for big, complex changes.</li> <li>Identify systematic weaknesses (in systems, structures, and sometimes habits) and develop plans that fix root causes in ways that persist long after you’ve moved on to the next hard problem.</li> <li>Mentor and uplevel others across Product Security and Engineering by helping teams think more strategically about threats, risk, and long-te