or apply directly on Chainguard's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 33 days Chainguard's roles stay open a median of 40 days
- Reposted
- No
- Salary listed
- No 5% of Chainguard's roles list one
- Ghost-job risk at Chainguard
- high 35 stale, 1 reposted of 83 open
- Hiring momentum
- 137 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-09-17
Measured from postings appearing on and disappearing from Chainguard's own greenhouse board since 2026-08-03. Full hiring picture for Chainguard.
About this role
As a Staff Vulnerability Management Engineer at Chainguard, you will manage a pipeline of novel vulnerabilities identified by frontier models, ensuring effective measurement, disclosure, and reporting. Your role involves coordinating with industry bodies, guiding standards, and representing Chainguard externally while working closely with AI model vendors to enhance software supply chain security.
- benefits
- 3/5
- freshness
- 3/5
- career value
- 4/5
- role clarity
- 4/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Chainguard as an employer.
What you need
- 7+ years in software security, open source maintenance, or vulnerability disclosure management
- A strong understanding of responsible disclosure
- Practical expertise with automating pipelines and processes
- Deep experience with open source communities
- Experience in coordinating with public sector or industry standards bodies and working groups
Nice to have
- Established thought leadership in the industry relating to vulnerability disclosure management and embargoes
- Familiarity with Chainguard Images or other minimal/hardened container base image ecosystems
- Experience operating a CNA
- Software engineering background in Python, Java, Javascript, Go or similar languages
- Background in security research, pen testing or bug bounties
What you get
- Flexible & Remote-First Culture
- Our Approach to Equity
- 100% Covered Health Insurance
- Flexible Time Off
- 18 Weeks Paid Parental Leave
Worth weighing
- No specific mention of the tech stack used in the role
- The role requires significant experience, which may limit opportunities for less experienced candidates
Summarised from Chainguard's posting. Read the full original.
Listed by Chainguard on their greenhouse job board, last confirmed open on 2026-09-17. PitchMeAI is not the employer.
More roles at Chainguard
- Staff Vulnerability Management EngineerCanada - Remote
- Partner Sales EngineerFrance - Remote; Germany - Remote
- Senior Customer Success Manager - GermanyGermany - Remote
- Staff Vulnerability Management EngineerUnited Kingdom - Remote
- Staff Software Engineer (Customer Platform)United States - Remote
- Staff Software Engineer (Customer Platform)United Kingdom - Remote
- Senior Product Manager (Experience)United States - Remote
- Staff Software Engineer, Developer PlatformUnited States - Remote