> Markdown version of [/jobs/ext/4636086-staff-software-engineer-chainguard-harness](https://www.wearedevelopers.com/jobs/ext/4636086-staff-software-engineer-chainguard-harness). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Software Engineer, Chainguard Harness

- **Company:** CHAINGUARD, INC.
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Expert
- **Salary:** $205,000.0 - $231,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Bug Tracking Systems, Cloud Computing, Customer Data Management, Data Deduplication, Github, Hypervisor, Identity and Access Management, Key Management, Kernel-Based Virtual Machine, Mantis Databases, Open Source Technology, Quick EMUlator (QEMU), Software Engineering, Large Language Models, Software Security, Gitlab, Kubernetes, Bare Metal, Build Tools, Terraform, Vulnerability Analysis
- **Published:** November 8, 2026
- **Apply:** https://www.careerbuilder.com/job-details/staff-software-engineer-chainguard-harness-new-york-ny--4091be42-bc2c-45d5-9dbb-f7e594edb453

## About the Role

Software Engineering, Open Source, Software Engineering, Artificial Intelligence (AI) Agents, Risk, Fortune 500 Customers, Hewlett-Packard Product Family, Mantis Bug Tracking Software, Power Amplifier, Artificial Intelligence (AI), * 10+ years of experience in software development

 * A track record of building and operating production services where security and data confidentiality were hard requirements, not afterthoughts
 * Experience designing systems that hold confidential customer data end to end
 * Experience shipping software into air-gapped, disconnected, or highly restricted environments
 * Deep experience with cloud infrastructure on GCP and/or AWS, including IAM, KMS, networking, and infrastructure as code (Terraform)
 * Hands-on experience with virtualization and workload isolation, such as KVM, QEMU, Firecracker or Cloud Hypervisor, gVisor, nested virtualization, or bare-metal hosts
 * A working knowledge of applied cryptography: envelope encryption, key management and rotation, HSM/KMS-backed keys, and signing
 * Proficiency with Go
 * Experience with AI tooling and a genuine enthusiasm for applying it to hard problems; experience building agentic systems is a plus
 * Strong communication skills and proficiency in English. You can explain a security model to an engineer, a security reviewer, and a customer''s CISO, and you work autonomously, take initiative, and ask for help early.

Nice to have

 * A background in offensive security, vulnerability research, penetration testing, or application security, and a sense of what separates a real, exploitable finding from noise
 * Experience building and running arbitrary third-party code across many languages and build systems
 * Familiarity with vulnerability data and disclosure: CVE and OSV formats, triage and deduplication, and coordinated disclosure
 * Experience distributing self-hosted software: Kubernetes and Helm, signed artifacts, SBOMs, and supply-chain provenance
 * Experience with GitHub or GitLab app integrations
 * Experience evaluating LLM output quality and managing model cost at scale