Security Engineer, Governance and Trust
Job Description:
• Design and wire up repositories in Git/GitHub for controls, assets, and risk scenarios so they’re versioned, reviewable, and automation-friendly.
• Build ingest & ETL pipelines into a trust data lake (e.g., BigQuery) to pull in signals from systems across Chainguard.
• Automate control evidence collection.
• Productionize a Python risk engine, turning a working prototype into something reliable, observable, and maintainable.
• Use Python, Bash, and SQL to wrangle data, stitch systems together, and eliminate repetitive work.
• Partner with engineering teams to make governance and trust part of the platform.
• Lean on and extend AI tooling (including orchestration frameworks like LangChain or LangGraph) to speed up analysis, data work, and automation.
• Contribute to a remote-first, low-ego team culture where feedback flows freely and we optimize for outcomes, not theatrics.
Requirements:
• 1–3 years of experience in a relevant area: data engineering, analytics, security engineering, SRE, or similar hands-on technical role.
• Comfortable with Git/GitHub and modern software workflows (branches, PRs, code review, CI, etc.).
• Practical experience with:
• Python for scripting and small tools.
• Bash or similar shell scripting.
• SQL for querying and joining data (nothing exotic—solid fundamentals go a long way).
• Some exposure to data wrangling and ETL concepts (pipelines, schemas, making messy data usable).
• A critical, analytical mindset: you care about the “why,” not just the “what,” and you’re comfortable zooming from big picture into the weeds.
• Genuine curiosity and learning mindset: you like picking up new tools and patterns, especially around security, risk, and data.
• Strong collaboration and communication skills in a remote setting: clear writing, proactive updates, low ego.
• Comfort using AI tools (ChatGPT, Claude, etc.) day-to-day, and excitement about orchestrating them into real workflows over time.
• Nice-to-haves (not hard requirements): Experience with BigQuery or another columnar data warehouse.
• Familiarity with statistics and probability, especially applied to risk or uncertainty.
• Prior work in a remote-first company.
Benefits:
• Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
• Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!).
• 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck.
• ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset.
• 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year.
• Design and wire up repositories in Git/GitHub for controls, assets, and risk scenarios so they’re versioned, reviewable, and automation-friendly.
• Build ingest & ETL pipelines into a trust data lake (e.g., BigQuery) to pull in signals from systems across Chainguard.
• Automate control evidence collection.
• Productionize a Python risk engine, turning a working prototype into something reliable, observable, and maintainable.
• Use Python, Bash, and SQL to wrangle data, stitch systems together, and eliminate repetitive work.
• Partner with engineering teams to make governance and trust part of the platform.
• Lean on and extend AI tooling (including orchestration frameworks like LangChain or LangGraph) to speed up analysis, data work, and automation.
• Contribute to a remote-first, low-ego team culture where feedback flows freely and we optimize for outcomes, not theatrics.
Requirements:
• 1–3 years of experience in a relevant area: data engineering, analytics, security engineering, SRE, or similar hands-on technical role.
• Comfortable with Git/GitHub and modern software workflows (branches, PRs, code review, CI, etc.).
• Practical experience with:
• Python for scripting and small tools.
• Bash or similar shell scripting.
• SQL for querying and joining data (nothing exotic—solid fundamentals go a long way).
• Some exposure to data wrangling and ETL concepts (pipelines, schemas, making messy data usable).
• A critical, analytical mindset: you care about the “why,” not just the “what,” and you’re comfortable zooming from big picture into the weeds.
• Genuine curiosity and learning mindset: you like picking up new tools and patterns, especially around security, risk, and data.
• Strong collaboration and communication skills in a remote setting: clear writing, proactive updates, low ego.
• Comfort using AI tools (ChatGPT, Claude, etc.) day-to-day, and excitement about orchestrating them into real workflows over time.
• Nice-to-haves (not hard requirements): Experience with BigQuery or another columnar data warehouse.
• Familiarity with statistics and probability, especially applied to risk or uncertainty.
• Prior work in a remote-first company.
Benefits:
• Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
• Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!).
• 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck.
• ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset.
• 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year.