Security Analyst (Governance and Trust)

Chainguard is seeking a Security Analyst to strengthen customer trust and scale security work through automation. The role maintains customer-facing security assurance content and governs AI agents used in Governance and Trust workflows, including reviewing their accuracy, quality, reliability, and drift.

Responsibilities:

• Maintain and improve the internal corpus of responses used for customer security questionnaires
• Keep Trust Center content and public go-to-market security materials accurate and up to date
• Maintain customer-facing security artifacts used during the sales process
• Ensure security documentation reflects current products, practices, and architecture
• Establish repeatable processes for reviewing, updating, versioning, and publishing assurance content
• Identify gaps, inconsistencies, and outdated information before materials are shared with customers
• Maintain and update AI agents used by the Governance and Trust function
• Audit agents regularly for accuracy, quality, reliability, and drift
• Refresh agent instructions, prompts, reference content, and other supporting information as requirements change
• Help define practical standards for maintaining AI-enabled workflows in a security and governance context
• Document agent behavior, changes, known limitations, and review outcomes
• Partner with stakeholders to identify opportunities to improve the reliability and usefulness of AI-assisted security work

Requirements:

• Experience in security assurance, security operations, GRC, customer trust, or a related security function
• Experience maintaining security questionnaires, Trust Center content, data flow diagrams, audit evidence, or other customer-facing security artifacts
• Strong attention to detail and a disciplined approach to documentation, version control, and quality review
• Comfort working with AI models or AI-enabled workflows, including maintaining models or agents rather than building models from scratch
• Familiarity with prompt engineering, prompt evaluation, or similar techniques for improving AI system performance
• Ability to assess whether AI-generated outputs are accurate, complete, and aligned with current source information
• Strong written and verbal communication skills, with the ability to translate technical and security concepts into clear customer-ready content
• Ability to work independently in a fast-paced environment and manage multiple priorities
• Sound judgment, curiosity, and a continuous-improvement mindset
• Experience supporting customer security reviews or responding to security questionnaires
• Experience with Trust Centers, security documentation libraries, or assurance content management
• Experience auditing AI agents, evaluating prompts, or maintaining retrieval and reference content
• Familiarity with security governance, risk, compliance, or responsible AI practices
• Experience creating or maintaining technical artifacts such as data flow diagrams