Senior Security Analyst (Governance and Trust)
ChainguardSoftware Supply company
United States$110,000 - $130,000 USDSenior
Kleiner Perkins
IVP
Redpoint Ventures
Lightspeed Venture Partners
Sequoia Capital
Spark Capital
Legal & ComplianceNew
About the role
TL;DR
Builds and operates public sector security programs for government customers.
- •Chainguard is seeking a Senior Security Analyst to build and operate the public sector security program, focusing on earning and maintaining trust with government customers.
- •This role involves translating federal requirements into practical security capabilities, supporting compliance efforts, and building continuous monitoring and authorization systems.
- •Key Responsibilities Design and operate a continuous monitoring and authorization capability portable across frameworks.
- •Translate public-sector requirements (CMMC, FedRAMP) into practical controls and risk-reducing recommendations.
- •Partner with Engineering and Product Security to align federal requirements with cloud-native systems.
- •Support the pursuit of a Facility Clearance (FCL) and associated governance.
- •Build scalable systems for control ownership, evidence collection, and reporting, favoring automation.
- •Requirements Deep technical understanding of cloud-native architecture and SaaS product design.
- •Hands-on experience in a federal, defense, or intelligence environment.
- •Working knowledge of CMMC Level 2 and FedRAMP, RMF, or NIST 800-53.
- •Sharp, risk-based judgment to differentiate technical compliance from actual risk reduction.
- •Ability to build structure in ambiguity and drive cross-functional work.
Required skills
CI/CDAWSGoogle CloudAzureTerraformDockerKubernetesGitHub ActionsVaultIAMSSOMFAOAuthSAML
Domain expertise
cybersecuritydefensegovernment
Benefits & perks
Remote-First Culture, Stock options, 100% Covered Health Insurance, Flexible Time Off, Paid Parental Leave
Tech stack
PythonJavaScriptBashGitLinuxAWSGoogle CloudAzureTerraformDockerKubernetesCI/CDGitHub ActionsJenkinsArgoCDHelmGitLab CICircleCIAnsibleChefPuppetPrometheusGrafanaDatadogNew RelicPagerDutyNginxHAProxyVaultIAM