Senior Product Manager (Malware Detection)

• Chainguard is building the most trusted source for open source software. Every artifact Chainguard distributes is evaluated by our scanner before it reaches a customer. It determines whether a package, container, or AI agent skill is safe to use—and sits between our customers and compromised software
• What began as a high-leverage internal system has become a core platform powering Chainguard Libraries, Containers, Agent Skills, and future products. We’re hiring the first Product Manager dedicated to this platform
• You’ll own detection quality, platform strategy, and the customer experience around scanning. You’ll partner closely with Engineering and Product Security to define how organizations evaluate software trust in an AI-driven world
• Own coverage, precision, and delivery of core product metrics
• Drive the feedback loop between Engineering and Product Security to continuously improve detection quality
• Build workflows for reviewing, escalating, and correcting detections quickly
• Define the roadmap for Chainguard’s shared scanning platform
• Scale the scanner beyond Libraries to Containers, Agent Skills, and future artifact types
• Balance investments in detection quality, performance, and extensibility
• Expand malware and greyware detection capabilities
• Partner with Product Security to identify emerging threats and publish actionable intelligence
• Define how customers investigate, enforce, and appeal scanner findings
• Build intuitive workflows for policy management and enterprise-scale operations

Benefits

• Equity/stock options
• Unlimited PTO
• Remote work with flexible coworking and team meetup opportunities
• Home office and internet stipend
• 100% health/dental/vision insurance coverage for you and your family- Experience taking products or platform capabilities from early concept through customer adoption and iterative improvement
• 5+ years of Product Management experience with a strong track record building developer tools, infrastructure, security, or platform products
• Strong technical credibility—you don’t need to write production code, but you should be comfortable discussing architecture, distributed systems, APIs, and security concepts with engineering teams
• Strong understanding of software supply chain security, malware detection, vulnerability management, or adjacent security domains
• Demonstrated success making product prioritization decisions in technically complex and ambiguous environments
• Excellent cross-functional leadership skills with the ability to influence Engineering, Security, Design, and GTM partners
• Experience owning highly technical platforms or backend infrastructure that supports multiple products or internal customers
• Experience working with AI-assisted security analysis or automated threat detection systems
• If your experience is close but doesn’t fulfill all requirements, please apply. We’re building the best team in technology and are focused on hiring “Chainguardians” with unique backgrounds, perspectives, and experiences
• Experience with malware detection, static analysis, software composition analysis (SCA), or vulnerability scanning
• Familiarity with package ecosystems such as npm, PyPI, Maven, Go modules, or container registries
• Background in cloud infrastructure, software supply chain security, or enterprise security platforms
• Experience building reusable platform capabilities that support multiple products