Chainguard

Staff Vulnerability Management Engineer

Chainguard · United States - Remote

Posted about a month ago

or apply directly on Chainguard's site. We never take the application ourselves.

Is this posting real?

This role has been open
33 days
Chainguard's roles stay open a median of 40 days
Reposted
No
Salary listed
No
5% of Chainguard's roles list one
Ghost-job risk at Chainguard
high
35 stale, 1 reposted of 83 open
Hiring momentum
137 roles opened in the last 90 days
↑ up vs. the prior 90 days
Last confirmed on the employer's board
2026-09-17

Measured from postings appearing on and disappearing from Chainguard's own greenhouse board since 2026-08-03. Full hiring picture for Chainguard.

About this role

As a Staff Vulnerability Management Engineer at Chainguard, you will manage a pipeline of novel vulnerabilities identified by frontier models, ensuring effective measurement, disclosure, and reporting. Your role involves coordinating with industry bodies, guiding standards, and representing Chainguard externally while working closely with AI model vendors to enhance software supply chain security.

Our read on this posting2.8out of 5
benefits
3/5
freshness
3/5
career value
4/5
role clarity
4/5
pay transparency
0/5

Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Chainguard as an employer.

What you need

  • 7+ years in software security, open source maintenance, or vulnerability disclosure management
  • A strong understanding of responsible disclosure
  • Practical expertise with automating pipelines and processes
  • Deep experience with open source communities
  • Experience in coordinating with public sector or industry standards bodies and working groups

Nice to have

  • Established thought leadership in the industry relating to vulnerability disclosure management and embargoes
  • Familiarity with Chainguard Images or other minimal/hardened container base image ecosystems
  • Experience operating a CNA
  • Software engineering background in Python, Java, Javascript, Go or similar languages
  • Background in security research, pen testing or bug bounties

What you get

  • Flexible & Remote-First Culture
  • Our Approach to Equity
  • 100% Covered Health Insurance
  • Flexible Time Off
  • 18 Weeks Paid Parental Leave

Worth weighing

  • No specific mention of the tech stack used in the role
  • The role requires significant experience, which may limit opportunities for less experienced candidates

Summarised from Chainguard's posting. Read the full original.

Listed by Chainguard on their greenhouse job board, last confirmed open on 2026-09-17. PitchMeAI is not the employer.

More roles at Chainguard

All 83 open roles at Chainguard

Apply to a Staff Vulnerability Management Engineer position at Chainguard - Jobs near me at United States - Remote