Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk.
Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake.
Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital.
Senior Product Manager, Malware Detection
The role, in a nutshell:
Chainguard is building the most trusted source for open source software. Every artifact Chainguard distributes is evaluated by our scanner before it reaches a customer. It determines whether a package, container, or AI agent skill is safe to use—and sits between our customers and compromised software.
What began as a high-leverage internal system has become a core platform powering Chainguard Libraries, Containers, Agent Skills, and future products. We're hiring the first Product Manager dedicated to this platform.
You'll own detection quality, platform strategy, and the customer experience around scanning. You'll partner closely with Engineering and Product Security to define how organizations evaluate software trust in an AI-driven world.
What you'll own:
Detection Quality
- Own coverage, precision, and delivery of core product metrics.
- Drive the feedback loop between Engineering and Product Security to continuously improve detection quality.
- Build workflows for reviewing, escalating, and correcting detections quickly.
Scanner Platform
- Define the roadmap for Chainguard's shared scanning platform.
- Scale the scanner beyond Libraries to Containers, Agent Skills, and future artifact types.
- Balance investments in detection quality, performance, and extensibility.
Threat Detection
- Expand malware and greyware detection capabilities.
- Partner with Product Security to identify emerging threats and publish actionable intelligence.
Customer Experience
- Define how customers investigate, enforce, and appeal scanner findings.
- Build intuitive workflows for policy management and enterprise-scale operations.
What we're looking for:
- 5+ years of Product Management experience with a strong track record building developer tools, infrastructure, security, or platform products.
- Experience owning highly technical platforms or backend infrastructure that supports multiple products or internal customers.
- Strong understanding of software supply chain security, malware detection, vulnerability management, or adjacent security domains.
- Demonstrated success making product prioritization decisions in technically complex and ambiguous environments.
- Excellent cross-functional leadership skills with the ability to influence Engineering, Security, Design, and GTM partners.
- Experience taking products or platform capabilities from early concept through customer adoption and iterative improvement.
- Strong technical credibility—you don't need to write production code, but you should be comfortable discussing architecture, distributed systems, APIs, and security concepts with engineering teams.
Nice to haves
- Experience with malware detection, static analysis, software composition analysis (SCA), or vulnerability scanning.
- Familiarity with package ecosystems such as npm, PyPI, Maven, Go modules, or container registries.
- Experience building reusable platform capabilities that support multiple products.
- Background in cloud infrastructure, software supply chain security, or enterprise security platforms.
- Experience working with AI-assisted security analysis or automated threat detection systems.
Explore Our Work
Dive into the practical side of what we do at Chainguard. These resources provide a hands-on look at our processes and offer an opportunity for in-depth understanding of our product offerings and the technology behind them.
About Us
We live and breathe our company values:
- We are customer obsessed — We focus on delivering solutions to our customers that create value and make their lives better.
- We have a bias for intentional action — We prioritize, plan, try things, and fail fast.
- We don't take ourselves too seriously (but we do serious work) — We are solving an important problem which takes focus, but we also like to enjoy the journey.
- We trust each other and assume good intentions — We're transparent with decisions to empower team members to make well informed decisions.
A few of the benefits we offer:
- Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
- Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!).
- 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck.
- ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset.
- 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year.
If your experience is close but doesn't fulfill all requirements, please apply. We're building the best team in technology and are focused on hiring "Chainguardians" with unique backgrounds, perspectives, and experiences.
Chainguard is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.
By submitting your application, you acknowledge that Chainguard will process your personal data in accordance with Chainguard's Global Candidate Privacy Notice.
