Staff Software Engineer, Chainguard Harness
Chainguard · United States - Remote
About this role
**Staff Software Engineer — Chainguard Harness** Chainguard is the trusted source for open source—delivering hardened, secure, production-ready builds of the software engineers and AI agents rely on. Customers include Fortune 500 enterprises and global industry leaders. Chainguard Harness uses frontier AI models to hunt down exploitable vulnerabilities in a customer’s application, then delivers validated findings with recommended fixes—without requiring model access. Security isn’t just a feature; it’s the product. --- ### The role, in a nutshell As a Staff engineer, you’ll own major parts of the Harness architecture, guide technical decisions across the team, and help take the product from beta to a service that scales to many more customers and environments. --- ### What you’ll do - **Own major parts of the system end to end**—from design through implementation, rollout, and operation. - **Build security into the foundation**: protect customer code end to end, enforce least-privilege access, and audit everything the system and its operators do. Partner with Product and Security on threat models and reviews. - **Make Harness reliable and observable** as a production-grade service, with sound long-term tradeoffs around scale, cost, technical debt, and build vs. buy. - **Work directly with customers** (and Product/field team): join customer calls and turn feedback into the roadmap. - **Raise the bar for the team** through design docs, code review, mentoring, and demonstrating how AI tooling can help a small team move fast without cutting corners on security. --- ### What we’re looking for - **10+ years** of software development experience. - A track record of building and operating **production services** where security and data confidentiality were hard requirements. - Experience designing systems that hold **confidential customer data end to end**. - Experience shipping software into **air-gapped, disconnected, or highly restricted environments**. - Deep experience with **cloud infrastructure on GCP and/or AWS** (IAM, KMS, networking, and infrastructure as code—Terraform). - Hands-on experience with **virtualization and workload isolation** (e.g., KVM, QEMU, Firecracker, Cloud Hypervisor, gVisor, nested virtualization, or bare-metal hosts). - Working knowledge of **applied cryptography** (envelope encryption, key management/rotation, HSM/KMS-backed keys, signing). - Proficiency with **Go**. - Experience with **AI tooling** and enthusiasm for applying it to hard problems (agentic systems is a plus). - Strong communication skills in **English**; able to explain security models to engineers, security reviewers, and customers’ CISOs, and work autonomously with initiative. --- ### Nice to have - Background in **offensive security**, vulnerability research, penetration testing, or application security. - Experience building and running **arbitrary third-party code** across many languages/build systems. - Familiarity with vulnerability data and disclosure (CVE/OSV formats, triage/deduplication, coordinated disclosure). - Experience distributing **self-hosted software** (Kubernetes/Helm, signed artifacts, SBOMs, supply-chain provenance). - Experience with **GitHub or GitLab app integrations**. - Experience evaluating **LLM output quality** and managing model cost at scale. --- ### Why this role - Work on a new product at the intersection of **AI and security**, used by real customers today. - Shape architecture and security model f
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.