Senior Product Manager

Role Description

Chainguard is building the most trusted source for open source software. Every artifact Chainguard distributes is evaluated by our scanner before it reaches a customer. It determines whether a package, container, or AI agent skill is safe to use—and sits between our customers and compromised software.

What began as a high-leverage internal system has become a core platform powering Chainguard Libraries, Containers, Agent Skills, and future products. We're hiring the first Product Manager dedicated to this platform.

You'll own detection quality, platform strategy, and the customer experience around scanning. You'll partner closely with Engineering and Product Security to define how organizations evaluate software trust in an AI-driven world.

What you'll own:

• Detection Quality:
  • Own coverage, precision, and delivery of core product metrics.
  • Drive the feedback loop between Engineering and Product Security to continuously improve detection quality.
  • Build workflows for reviewing, escalating, and correcting detections quickly.
• Scanner Platform:
  • Define the roadmap for Chainguard's shared scanning platform.
  • Scale the scanner beyond Libraries to Containers, Agent Skills, and future artifact types.
  • Balance investments in detection quality, performance, and extensibility.
• Threat Detection:
  • Expand malware and greyware detection capabilities.
  • Partner with Product Security to identify emerging threats and publish actionable intelligence.
• Customer Experience:
  • Define how customers investigate, enforce, and appeal scanner findings.
  • Build intuitive workflows for policy management and enterprise-scale operations.

Qualifications

• 5+ years of Product Management experience with a strong track record building developer tools, infrastructure, security, or platform products.
• Experience owning highly technical platforms or backend infrastructure that supports multiple products or internal customers.
• Strong understanding of software supply chain security, malware detection, vulnerability management, or adjacent security domains.
• Demonstrated success making product prioritization decisions in technically complex and ambiguous environments.
• Excellent cross-functional leadership skills with the ability to influence Engineering, Security, Design, and GTM partners.
• Experience taking products or platform capabilities from early concept through customer adoption and iterative improvement.
• Strong technical credibility—you don't need to write production code, but you should be comfortable discussing architecture, distributed systems, APIs, and security concepts with engineering teams.

Nice to haves

• Experience with malware detection, static analysis, software composition analysis (SCA), or vulnerability scanning.
• Familiarity with package ecosystems such as npm, PyPI, Maven, Go modules, or container registries.
• Experience building reusable platform capabilities that support multiple products.
• Background in cloud infrastructure, software supply chain security, or enterprise security platforms.
• Experience working with AI-assisted security analysis or automated threat detection systems.

Benefits

• Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
• Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options.
• 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents.
• ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset.
• 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year.