Source Job

• Provide vision, mentorship, and strategic leadership for a diverse engineering team building secure open source libraries at scale.
• Guide technical direction and product strategy spanning language ecosystems, dependency management, security hardening, tooling, automation, and services.
• Set policies, quality standards, and continuous improvement while balancing security, performance, stability, and customer value.

Chainguard provides hardened, secure, and production-ready builds of open source software. It is venture-backed by leading investors and serves Fortune 500 enterprises and global industry leaders.

• Own detection quality, platform strategy, and customer experience for Chainguard's malware scanning platform.
• Drive the roadmap for the shared scanning platform, scaling it to support containers, libraries, and AI agent skills.
• Partner with Engineering and Product Security to expand threat detection capabilities and define how organizations evaluate software trust.

Chainguard provides hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a culture focused on customer obsession and intentional action.

• Lead engineering teams responsible for governance solutions on the Delinea Platform and Fastpath Assure.
• Oversee development and implementation strategy for key capabilities, ensuring alignment with business objectives.
• Provide technical oversight, mentor teams, and drive continuous improvement in engineering processes.

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization. They have a global team with a culture of innovation, respect, and fairness, backed by strategic investment from TPG.

• Own Tremendous' security posture end-to-end, partnering with our engineering team on production infrastructure and code security.
• Assess where we have gaps, prioritize them, and tackle our highest-leverage gaps first.
• Treat incident response as core, not afterthought.

Tremendous is a global platform for businesses to send payouts like gift cards and money to anyone, anywhere, instantly. Trusted by 20,000+ organizations, they are profitable and fully remote with a high-documentation, low-meeting culture and an employee NPS in the high 80s.

• Develop and maintain backend features for GitLab's vulnerability management workflows, primarily using Ruby on Rails.
• Collaborate with frontend engineers and contribute across the stack when needed, focusing on performance and reliability.
• Participate in on-call rotations to assist with troubleshooting product operations and security issues.

GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity and reduce security risk. With over 50 million registered users and more than 50% of the Fortune 100 as customers, GitLab fosters a high-performance culture driven by values and continuous knowledge exchange.

• Threat model new product features and integrations, hardening systems with effective controls.
• Operate and evolve the application security toolchain, keeping it high-signal for developers.
• Own day-to-day security operations across the detection stack, triaging and resolving incidents.

Gauntlet builds the financial systems of the future, operating across the entire onchain finance stack to offer vault products for institutional clients. They serve over $1.5B in client TVL and combine traditional finance with crypto-native expertise.

• Manage a novel vulnerabilities pipeline, owning measurement, disclosure, and reporting of thousands of vulnerabilities weekly.
• Coordinate across the industry with bodies like the Linux Foundation and CISA, and represent Chainguard externally.
• Guide industry direction and work with AI model vendors to evolve software supply chain security.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. The company is venture-backed by leading investors and serves Fortune 500 enterprises and global industry leaders.

• Build and harden secure CI/CD pipelines with security gates to catch issues before production.
• Lead security architecture reviews and threat models for Kubernetes-based workloads on GCP and AWS.
• Harden container images, Kubernetes configurations, and cloud IAM to minimize attack surface.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. The company is venture-backed by leading investors and serves Fortune 500 enterprises, with a culture that values customer obsession, intentional action, and trust.

• Lead product strategy and roadmap for a security-focused scanning platform.
• Drive detection quality improvements and scalable workflows across software artifacts.
• Partner with engineering, security, and GTM teams to deliver enterprise-scale security solutions.

They build a security platform that evaluates the safety and trustworthiness of software artifacts. Their culture is collaborative, innovative, and remote-first, with a focus on customer impact and professional growth.

• Proactively identify and drive security improvements across the product and platform.
• Partner with engineering teams to threat model new features and review designs early in development.
• Build and improve security tooling, libraries, and workflows to make secure development the default path.

Fellow is an AI meeting assistant that helps teams record, transcribe, summarise, and act on their meetings. We are a Series A company backed by major venture firms, with a remote-first culture and a growing team.

• Lead the Build team roadmap across UBT, TUBE, and the broader build platform to drive strategy and execution.
• Own delivery of GitLab distributable artifacts including packages, container images, and cloud marketplace images.
• Drive a build-once, deploy-everywhere model across Omnibus, CNG, and future delivery targets.

GitLab is the intelligent orchestration platform for DevSecOps that enables organizations to increase developer productivity, improve operational efficiency, and reduce security risk. With over 50 million registered users and trusted by more than 50% of the Fortune 100, GitLab fosters a high-performance culture driven by AI innovation and continuous knowledge exchange.

• Collaborate with internal engineers and the open source community on feature and bug fix requests.
• Proactively identify and resolve ambiguity in product requirements.
• Own architecture decisions and ensure technical quality across the team.

Defense Unicorns delivers mission value by streamlining software delivery so customers can focus on the most important challenges. Our team is composed of innovators, software engineers, and veterans with decades of experience delivering technology programs across the federal market.

• Design, build, and own security integrations and detections across multiple libraries, with .NET and/or Java as your primary focus.
• Take projects from prototype to deployed, correct, operable, and maintainable, writing code that safely instruments thousands of applications in production.
• Mentor teammates and act as a force multiplier, raising the bar on code quality and testing.

Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. The company operates at high scale with trillions of data points per day and values pragmatism, honesty, and simplicity in its engineering culture.

• Build and lead Attio's Product Security function, securing their AI-native SaaS platform and sensitive customer data.
• Work with Engineering Leadership to ensure security by design, mitigating unique risks from AI-driven features and AI-assisted development.
• Lead production security incident response, recruiting and retaining a world-class team of Security Engineers and SecOps practitioners.

Attio is the CRM for agentic revenue, designed for ambitious go-to-market teams to understand every customer and automate at scale. They have raised $116M from top investors and hire builders who thrive on complex technical challenges, holding themselves to a high bar and delighting users.

• Build secure-by-default infrastructure and automation to eliminate entire vulnerability classes across money-moving systems.
• Own application security, threat modeling, and vulnerability disclosure from design review to production.
• Partner with engineering to set security standards, make risk-based decisions, and ship fast without compromising safety.

Flex is building the AI-native private bank for business owners, re-architecting the entire financial system for entrepreneurs. Since launching in 2023, Flex has scaled to nine-figure annualized revenue, raised $100M+ in equity and $300M+ in debt, and operates with a high-bar, low-ego culture focused on speed and execution.

• Design, build, and scale application security capabilities to support secure software development across the enterprise.
• Develop security patterns and guardrails for AI-assisted development and agentic workflows.
• Integrate security tools with developer platforms to improve vulnerability management and automate remediation.

NBCUniversal is a leading media and entertainment company creating world-class content for film, television, streaming, and theme parks. As a subsidiary of Comcast, it fosters an inclusive culture and community engagement across a diverse global workforce of thousands.

• Partner with product and engineering teams to identify application security risks and recommend mitigations.
• Read application code, configuration, and pull requests to understand security risks and suggest improvements.
• Contribute to vulnerability management, automation, and security tooling to scale AppSec efforts.

Affirm is reinventing credit to make it more honest and friendly, providing consumers the flexibility to buy now and pay later without hidden fees. We are a remote-first company with a culture centered on people, transparency, and offering competitive benefits including health coverage and flexible spending.

• Lead threat modeling and secure design reviews across C++, Go, and Rust
• Build and tune application security testing (SAST, SCA, secret scanning, DAST) and fuzzing harnesses
• Operate PSIRT and build security champions program to raise the security bar

Redpanda is a unified platform for agent-data interaction, combining streaming, SQL analytics, and intelligent connectivity with governance for enterprise AI agents. It is a fast-moving, people-first organization with a small, high-trust security team and team members across the globe.

• Own the technical strategy for multi-ecosystem scaling, defining architecture for onboarding new language ecosystems.
• Drive end-to-end remediation automation, leading redesign of CVE workflows to close the loop from detection to verified release.
• Set platform-wide technical direction spanning package index, build pipelines, and orchestration tooling to serve customers and ecosystem teams.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They serve Fortune 500 enterprises and global industry leaders, and are venture-backed by leading investors, fostering a culture of customer obsession and intentional action.

• Own and articulate the multi-year product vision and strategy for key Delinea PAM solutions, aligning to company objectives and market opportunity.
• Translate strategy into a prioritized roadmap and backlog, making trade-off decisions with agile teams to deliver iterative, measurable value.
• Partner with Engineering, QA, and Support teams to ensure high-quality releases and timely feature delivery.

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to govern interactions across the modern enterprise. With a global team, world-class product leadership, and strategic investment from TPG, they value diversity, innovation, and a culture of respect and fairness.