# Senior Security Analyst

**Company:** [Chainguard](https://hotfix.jobs/companies/chainguard)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $110k – $130k/yr
**Experience:** 5+ years
**Skills:** Cmmc 2.0, FedRAMP, Nist 800-53, Rmf, Cloud-Native Architecture, SaaS, Policy-As-Code, GitOps, Continuous Monitoring, Automated Evidence Collection, Sboms, Slsa, Secure Ci/Cd, Artifact Signing, Provenance
**Posted:** 2026-08-25

> Build and operate Chainguard’s public-sector governance and trust capabilities, translating federal security requirements into automated controls, evidence systems, and risk-based decisions. The role requires hands-on federal, defense, or intelligence experience and strong technical fluency in cloud-native environments.

## Job Description

## Responsibilities
- Design and operate continuous monitoring and continuous authorization capabilities that can transfer across public-sector frameworks.
- Translate CMMC 2.0, FedRAMP 20x, and other requirements into practical controls, evidence pipelines, and risk-based recommendations.
- Partner with Engineering and Product Security to connect federal requirements to cloud-native systems and Athena.
- Support pursuit of a Facility Clearance (FCL) and related internal governance.
- Build scalable systems for control ownership, evidence collection, remediation tracking, exceptions, and reporting, emphasizing automation and policy-as-code.
- Coordinate Security, Federal Strategy, Go-to-Market, Product, Engineering, and Legal stakeholders.
- Provide technically grounded recommendations on federal security risks and program tradeoffs.
- Create documentation for technical, non-technical, and customer-facing audiences.

## Requirements
- Technical depth in cloud-native architecture, SaaS product design, and software development practices.
- Hands-on technical or operational experience in federal, defense, or intelligence environments.
- Working knowledge of CMMC Level 2 and at least one of FedRAMP, RMF, or NIST 800-53.
- Strong risk-based judgment and ability to distinguish compliance from actual risk reduction.
- Ability to build structure in ambiguity and drive cross-functional work to completion.
- Clear written and verbal communication.
- Collaborative, low-ego working style.

## Nice-to-haves
- Exposure to federal personnel or facility clearance processes.
- Familiarity with FedRAMP 20x or automated continuous compliance approaches.
- Experience with policy-as-code, GitOps, continuous control monitoring, or automated evidence collection.
- Exposure to IRAP, Germany's C5, or similar non-US public-sector security regimes.
- Familiarity with SBOMs, artifact signing, provenance, SLSA, or secure CI/CD.
- Experience at a high-growth startup or security-first technology company.

## Compensation & Benefits
- Base salary: $110,000–$130,000 USD.
- Remote-first culture with meetup opportunities, destination summits, and coworking, phone, and internet stipends.
- Stock options, participation in secondary offerings, and a 10-year exercise window.
- 100% covered health, vision, and dental insurance premiums for employees and dependents.
- Flexible time off.
- Paid parental leave: 18 weeks for birthing parents and 12 weeks for non-birthing parents.

## Similar jobs

- [Senior Information Security Engineer](https://hotfix.jobs/jobs/36efd016-44f1-4b75-b872-b00cdcbd95a3) - Supernova Technology - Chicago, IL - $110k – $140k/yr
- [Senior Cloud Security Engineer](https://hotfix.jobs/jobs/7fed602d-1ee8-40b7-b4d6-25387a3e2e1c) - Ontic - Remote - $110k – $125k/yr
- [Senior Security Analyst](https://hotfix.jobs/jobs/15fe4f72-47a5-46c6-8443-c26de1fc7e1f) - Valon - Remote - $115k – $145k/yr
- [Senior Incident Responder](https://hotfix.jobs/jobs/b6cdf982-dad3-4c25-be1a-310793748d2e) - BlackCloak - Remote - $105k – $115k/yr
- [Senior Security Engineer](https://hotfix.jobs/jobs/9286e91d-ca35-4449-bb47-da0dc51b2aaa) - ConductorOne - Remote - $100k – $200k/yr

**Apply:** https://hotfix.jobs/jobs/1cdbbfe5-c5dc-484e-8f62-5a34578ab04e
**Canonical:** https://hotfix.jobs/jobs/1cdbbfe5-c5dc-484e-8f62-5a34578ab04e