Design and wire up repositories in Git/GitHub for controls, assets, and risk scenarios so they’re versioned, reviewable, and automation-friendly.
Build ingest & ETL pipelines into a trust data lake (e.g., BigQuery) to pull in signals from systems across Chainguard.
Automate control evidence collection.
Productionize a Python risk engine, turning a working prototype into something reliable, observable, and maintainable.
Use Python, Bash, and SQL to wrangle data, stitch systems together, and eliminate repetitive work.
Partner with engineering teams to make governance and trust part of the platform.
Lean on and extend AI tooling (including orchestration frameworks like LangChain or LangGraph) to speed up analysis, data work, and automation.
Contribute to a remote-first, low-ego team culture where feedback flows freely and we optimize for outcomes, not theatrics.

1–3 years of experience in a relevant area: data engineering, analytics, security engineering, SRE, or similar hands-on technical role.
Comfortable with Git/GitHub and modern software workflows (branches, PRs, code review, CI, etc.).
Practical experience with:
Python for scripting and small tools.
Bash or similar shell scripting.
SQL for querying and joining data (nothing exotic—solid fundamentals go a long way).
Some exposure to data wrangling and ETL concepts (pipelines, schemas, making messy data usable).
A critical, analytical mindset: you care about the “why,” not just the “what,” and you’re comfortable zooming from big picture into the weeds.
Genuine curiosity and learning mindset: you like picking up new tools and patterns, especially around security, risk, and data.
Strong collaboration and communication skills in a remote setting: clear writing, proactive updates, low ego.
Comfort using AI tools (ChatGPT, Claude, etc.) day-to-day, and excitement about orchestrating them into real workflows over time.
Nice-to-haves (not hard requirements): Experience with BigQuery or another columnar data warehouse.
Familiarity with statistics and probability, especially applied to risk or uncertainty.
Prior work in a remote-first company.

Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!).
100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck.
∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset.
18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year.

Security Engineer, Governance and Trust

Key skills