Source Job

US Canada UK Unlimited PTO 18w maternity 12w paternity

  • Own the product security research agenda and turn emerging threats into strategy.
  • Partner with Product, Engineering, and Security leadership to shape roadmap decisions.
  • Represent Chainguard externally through talks and thought leadership to advance the industry.

Application Security

20 jobs similar to Principal Product Security Researcher

Jobs ranked by similarity.

$205,000–$231,000/yr
US Unlimited PTO 18w maternity 12w paternity

  • Own the end-to-end Athena member workflow and strategy.
  • Be the primary product voice representing Athena to customers.
  • Lead cross-functional delivery and mentor product peers.

Chainguard provides hardened, secure builds of open source software to help organizations build faster, stay compliant, and eliminate risk. It is a venture-backed company serving Fortune 500 enterprises and global leaders, with a remote-first culture.

US

  • Lead and execute Delinea's Product Security Program, including secure design reviews, threat modeling, and security consulting.
  • Collaborate with Enterprise Architecture, Development, DevOps, and Cloud engineering teams to balance security with business objectives.
  • Define baseline cloud, container, application, and infrastructure security standards and integrate them into CI/CD pipelines.

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, with a cloud-native Identity Security Platform that applies AI-powered context across the entire identity lifecycle. We are a passionate, global team driven by world-class product leadership, outstanding engineers, and strategic investment from TPG, valuing diversity, innovation, and a culture of respect and fairness.

UK Unlimited PTO 18w maternity 12w paternity

  • Set product security direction across major products and platforms, leading cross-functional initiatives.
  • Embed security by design into roadmaps and engineering work, with high autonomy.
  • Drive security assurance programs and mentor engineers across the organization.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.

$238,000–$357,000/yr
US Canada

  • Partner with product teams on security early to identify security requirements and threat-model implications before designs are locked.
  • Align Security Engineering with product strategy by translating feature-team needs into prioritized security work.
  • Own an independent security roadmap focusing on platform-level security investments like key management and post-quantum cryptography.

1Password is a cybersecurity company building enterprise password manager and Unified Access Management solutions to secure digital identities and employee productivity. With over $400M ARR and trusted by over 180,000 businesses, we maintain a remote-first culture with a team of curious, driven individuals.

Europe US 6w PTO

  • Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
  • Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
  • Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.

n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.

US Unlimited PTO 18w maternity 12w paternity

  • Lead post-sales customer engagements, including onboarding, implementation, and adoption for commercial customers.
  • Build relationships with stakeholders and collaborate with sales, solutions architects, and support teams to drive renewals and expansion.
  • Develop hands-on technical knowledge of Chainguard and advocate for customer needs across internal teams.

Chainguard provides trusted, hardened, and production-ready builds of open source software to help organizations secure their software supply chain. The company is venture-backed, founded by industry experts, and serves Fortune 500 enterprises and global leaders.

$73,900–$83,300/yr
Canada 3w PTO

  • Collaborate across engineering, product, and customer teams to embed security requirements throughout the product lifecycle.
  • Manage security assessments, third-party risk reviews, and vulnerability disclosure processes, including CVE registration.
  • Support AI security governance and secure development practices, including monitoring applications and services beyond core engineering.

They are a growing technology organization that develops products with a strong focus on security and responsible AI adoption. The culture is collaborative and innovation-driven, with remote work across Canada, autonomy, and continuous improvement.

Global

  • Own and run bug bounty programs and external audit engagements, triaging and validating fixes.
  • Secure code and software supply chain, including CI/CD defenses, dependency controls, and signing.
  • Build anti-scam, anti-abuse, and security tooling with static/dynamic analysis and LLM-driven agents.

Mysten Labs builds foundational blockchain infrastructure and products, including Sui and Move, to advance the internet and enable the agent economy. It is a remote-first, world-class team backed by a $300M Series B from leading venture funds.

Global

  • Work with engineering teams to run security assessments and threat models for cloud-native and SaaS products.
  • Review cloud application architectures, build automation for security controls, and participate in incident response.
  • Communicate security risks to technical and non-technical audiences and champion improvements to security processes.

Atlassian provides collaboration software solutions designed to help teams work better together. The company has a global, inclusive culture where the unique contributions of all employees create success.

$110,000–$130,000/yr
US Canada UK Germany Unlimited PTO 18w maternity 12w paternity

  • Maintain and improve customer security questionnaire responses, Trust Center content, and customer-facing security artifacts.
  • Audit and update AI agents used by Governance and Trust to ensure accuracy, quality, and alignment with current practices.
  • Establish repeatable processes for reviewing, versioning, and publishing assurance content.

Chainguard delivers hardened, secure, and production-ready builds of open source software so organizations can build faster, stay compliant, and eliminate risk. The company is venture-backed by leading investors and serves Fortune 500 enterprises, with a culture centered on customer obsession, intentional action, and mutual trust.

US

  • Design, build, and maintain production features with a strong product security focus.
  • Own vulnerability response from initial triage through coordinated disclosure and patched releases.
  • Conduct threat modeling and security-sensitive design reviews to help engineers make informed security decisions.

This company builds cloud-native infrastructure software with a strong focus on Kubernetes security. They operate as a remote-first, globally distributed team that values engineering ownership and autonomous work.

$190,000–$250,000/yr
US Unlimited PTO

  • Educate customers on application security and software supply chain security through engaging demos.
  • Serve as a technical expert on Endor Labs' product suite and shape solutions with engineering.
  • Guide customers through onboarding and adoption to ensure they achieve security and development goals.

Endor Labs provides security solutions for AI-generated code, using a patented code context graph to identify and fix exploitable vulnerabilities. Founded by Varun Badhwar, the company has raised $163M and serves major customers like OpenAI and SpaceX, fostering a mission-driven, collaborative culture.

$122,400–$176,000/yr
US

  • Conduct original threat intelligence research into active email and identity attack campaigns.
  • Synthesize complex and conflicting data into clear assessments, reports, briefings, and webinars for varied audiences.
  • Partner with Sales, Customer Success, and Marketing to deliver intelligence that supports customer and prospect decisions.

Abnormal protects the humans behind the world's most critical organizations from AI-powered cybercrime. 5,000 enterprises trust our behavioral AI platform.

UK

  • Lead and grow a team of security engineers focused on protecting cloud-native environments and CI/CD pipelines.
  • Drive technical strategy, threat modeling, and security automation across multi-cloud infrastructure.
  • Partner with engineering and DevOps teams to embed secure-by-design principles and manage vulnerability and supply chain security.

Wiz is a cybersecurity company that provides a cloud security platform connecting code, cloud, and runtime to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and now powered by Google, with a culture that values world-class talent.

$183,000–$248,000/yr
US Unlimited PTO 18w maternity 12w paternity

  • Manage launches and growth initiatives for Chainguard Containers, driving revenue and cross-functional alignment.
  • Develop product positioning, messaging, and enablement content for sales teams.
  • Collaborate with product management, engineering, and marketing on strategy, pricing, and competitive analysis.

Chainguard provides hardened, secure builds of open source software to help organizations build faster and stay compliant. The company is venture-backed, serves Fortune 500 enterprises and global leaders, and fosters a customer-obsessed, transparent, and collaborative culture with a remote-first approach.

$210,000–$310,000/yr
Global Unlimited PTO

  • Define the product vision, strategy, and roadmap for security-focused features.
  • Conduct market research and customer feedback to identify product opportunities.
  • Collaborate with engineering, design, sales, and marketing on secure product delivery.

ClickHouse develops an open-source database platform for real-time analytics, with a focus on secure data infrastructure. The company is a rapidly scaling, remote-friendly startup spanning over 25 countries and an employee-driven culture.

EMEA

  • Lead the Application Security program across all products, embedding security throughout the SDLC.
  • Integrate AppSec findings into centralized vulnerability workflows, correlating them with asset and exploit intelligence.
  • Automate security testing pipelines and mentor engineers on secure coding and threat modeling.

ServiceNow is the AI control tower for business reinvention, helping 85% of the Fortune 500 work smarter with its AI platform. The company is building an AI-native culture where technology and talent are unstoppable together.

$204,500–$330,700/yr
US

  • Lead and manage the Product Security team, shaping a risk-driven security program in partnership with the Director of Security.
  • Guide engineering teams to own their security health, with automation handling first-pass findings and Security validating rather than fixing.
  • Act as incident manager of record, delegated approver, and drive monthly and quarterly security posture reporting.

LaunchDarkly provides a feature management platform that helps developers release software safely and efficiently through gradual rollouts and targeted experiences. The company values high trust, transparency, and a humble, collaborative team culture.

$171,500–$245,000/yr
US

  • Dissect and outmaneuver sophisticated cyber attack techniques across endpoint and cloud environments.
  • Translate complex threat research into scalable detection recommendations and engineer attack code.
  • Collaborate with detection engineers, intelligence analysts, and threat hunters to prioritize and refine deliverables.

Zscaler provides a cloud security platform that securely connects users to applications, protecting customers from cyberattacks and data loss. It is the world's largest in-line cloud security platform with an AI-native culture.

US

  • Own application security across cloud services, APIs, data pipelines, and edge-deployed systems.
  • Lead threat modeling, secure design reviews, and in-depth code reviews to identify and fix vulnerabilities.
  • Build and integrate security tooling like SAST, DAST, SCA, and CodeQL into CI/CD and mature the secure SDLC.

Quartermaster AI leverages cutting-edge AI and robotics to make the ocean a safe and sustainably managed resource. It is a fast-moving, rapidly scaling defense-tech startup with a mission-driven culture and significant autonomy for engineers.