Staff Vulnerability Management Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Staff engineer managing novel vulnerability disclosure and CVE coordination for Chainguard, which secures open-source software supply chains. Leading industry collaboration on AI-driven software security standards, embargoes, and response processes.
Responsibilities:
- Own measurement, disclosure, and reporting of a pipeline of thousands of novel vulnerabilities identified weekly by frontier models and other sources
- Calibrate the response process in response to emerging trends
- Manage reporting of newly discovered vulnerabilities to upstream projects and maintainers
- Run the CNA program to assign new CVEs where necessary
- Coordinate internal and external embargoes with customers, internal engineering teams, and external maintainers
- Work with the Linux Foundation, CISA, and other bodies to coordinate actions and responses
- Guide industry direction so Chainguard customer needs are met by emerging standards and norms
- Represent Chainguard externally and visibly as the face of its industry-leading efforts
- Work with AI model vendors to guide future evolution of the software supply chain
- Provide technical leadership, cross-team influence, and ownership of complex problems as an individual contributor
Requirements:
- 7+ years in software security, open source maintenance, or vulnerability disclosure management
- Strong understanding of responsible disclosure
- Practical expertise automating pipelines and processes at large scale and removing the human-in-the-loop
- Deep experience with open source communities
- Experience coordinating with public sector or industry standards bodies and working groups
- Established vulnerability disclosure management and embargo thought leadership (nice to have)
- Familiarity with Chainguard Images or minimal/hardened container base image ecosystems (nice to have)
- Experience operating a CNA (nice to have)
- Software engineering background in Python, Java, Javascript, Go, or similar languages (nice to have)
- Background in security research, penetration testing, or bug bounties (nice to have)
Benefits:
- Flexible & Remote-First Culture
- Team meetup opportunities
- Bi-annual destination summits
- Monthly stipend for coworking spaces, phone and internet costs
- Stock options upon hire and promotion
- Participation in secondary offerings
- 10 years to exercise stock options
- 100% covered health, vision and dental insurance premiums for you and your dependents
- Flexible time off
- 18 weeks paid parental leave for birthing parents
- 12 weeks paid parental leave for non-birthing parents
- Option to use parental leave all at once or throughout the child's first year
Similar Jobs
Advanced Consulting Engineer
Advanced Consulting Engineer helping Tanium customers adopt endpoint management and security solutions. Providing technical advisory, troubleshooting, knowledge transfer, and product guidance for complex or stalled deployments.
Forward Deployed Engineer
Forward Deployed Engineer building AI-native software for Asset Living’s property management operations. Owning full-stack products, integrations, automation, and measurable improvements across business functions.
Escalation Engineer
Escalation Engineer resolving critical Kubernetes and multi-cloud storage incidents for Everpure, a data-storage technology company. Bridging support and engineering through troubleshooting, bug fixes, and reliability improvements.
Staff Vulnerability Management Engineer
Staff engineer managing novel vulnerability disclosure and CVE operations for Chainguard’s secure open-source software supply chain. Coordinating industry bodies, maintainers, customers, and AI model vendors.
Staff Vulnerability Management Engineer
Staff engineer managing AI-discovered vulnerabilities for Chainguard, which builds hardened open-source software. Coordinating disclosures, CVEs, embargoes, and industry-wide supply-chain security efforts.
Endpoint Engineer
Endpoint Engineer supporting Falconwood’s DoD IT consulting and programmatic services for Navy enterprise workstations. Managing Azure, MECM, M365, hardware, software, and cybersecurity requirements.
Plumbing and Heating Engineer
Clean Energy Technician installing heat pumps, cylinders, and radiators for Aira’s sustainable home-energy systems. Training toward Heat Pump Installer progression while helping households reduce energy costs and carbon emissions.
Spares Engineer, Composite Materials Expert
Spares Engineer identifying and resolving out-of-production composite parts for ATEXIS, an aerospace and industrial engineering-support consultancy. Assessing operational risks and coordinating alternatives with stakeholders.
Lift Engineer
Lift Engineer servicing and repairing lifts across Cambridge for Stannah, a global access-solutions manufacturer. Maintaining safe operation across commercial, residential, and public sites.
Lift Engineer
Lift Engineer servicing, repairing, and maintaining lifts across Stevenage for Stannah, a lift and accessibility manufacturer. Managing breakdowns, fault finding, safety compliance, and an allocated local route.
Lift Engineer
Lift Engineer servicing, repairing, and maintaining lifts across Slough for Stannah, a global access-equipment manufacturer. Managing a local route, responding to breakdowns, and keeping commercial, residential, and public sites safe.
Lift Repair Engineer
Lift Repair Engineer repairing and fault-finding lifts for Stannah, a global access engineering company. Covering commercial, residential, and public sites across Luton and surrounding areas.
Lead Databricks Engineer
Azure Databricks Engineer building scalable data pipelines for Blend’s AI services. Optimizing Spark-based ETL/ELT, Delta Lake, and Azure analytics solutions.
Lift Repair Engineer
Lift Repair Engineer repairing and maintaining lifts across Norwich for Stannah, a global access-equipment manufacturer. Diagnosing faults, replacing components, and responding to breakdowns.
Lift Repair Engineer
Lift Repair Engineer repairing and maintaining lifts for Stannah, a family-owned access-products manufacturer. Covering a structured Chichester patch across commercial, residential and public sites.
VoIP Engineer, VoIP Service Manager
VoIP Service Manager maintaining IP telephony routes for DID Global, an international business communications provider. Monitoring call quality, managing providers, and supporting sales with route pricing and client configurations.
Forward Deployed Engineer – Contract
Forward Deployed Engineer building AI-powered software for realfast, India's post-AI IT services company. Working directly with clients and founders across full-stack, data, and AI delivery.
Lift Engineer
Lift Engineer servicing and repairing lifts across Norwich for Stannah, a global mobility-equipment manufacturer. Maintaining safe operation across commercial, residential, and public sites within an allocated local route.
Ingeniero Técnico Industrial, Delineante
Ingeniero técnico industrial y delineante creando planos CAD para fabricante europeo de piezas metálicas. Preparando documentación técnica precisa para fabricación mecánica remota desde Colombia.
Ansible Engineer
Red Hat Ansible Engineer automating infrastructure operations for a United States organization. Designing playbooks, managing configurations, deployments, security tasks, and compliance reporting.