Note: The job is a remote job and is open to candidates in USA. Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are seeking a Staff Security Engineer for their AI Platform to own the managed AI platform posture end-to-end, ensuring secure and compliant use of AI technologies across the organization.
Responsibilities
- Continuously monitor Claude and ChatGPT product roadmaps, release notes, and vendor communications to anticipate platform changes before they land
- Translate upcoming features into proactive configuration, policy, and enablement decisions not reactive scrambles
- Maintain active relationships with Anthropic and OpenAI account teams; flag ToS updates, data processing agreement changes, and acceptable use policy shifts before they become surprises
- Provide expert-level administration of AI console environments across both platforms
- Manage Claude and ChatGPT organizational settings files using Git, version-controlled, reviewed, and deployed like the infrastructure they are
- Own API key lifecycle management and secrets hygiene for all AI integrations
- Manage SSO/SCIM provisioning for AI platforms; ensure access is tight, auditable, and clean
- Develop token tracking and financial dashboards so leadership actually knows what AI costs us by team, by use case, by month
- Build anomaly detection on AI spend; if something spikes, you catch it before accounting does
- Produce regular usage trend reports and ROI framing for leadership that goes beyond "we use AI a lot"
- Build and maintain internal MCP servers that extend AI capabilities into our workflows securely
- Be the in-house subject matter expert on agentic AI builds such as architecture, risk, failure modes, and the parts that go sideways in ways no one anticipated
- Write code. Python and/or TypeScript. AI-augmented is fine (encouraged, even), but you need to own what ships
- Identify and mitigate prompt injection risks in internal AI-powered tools
- Ensure no sensitive or regulated data (PII, PCI, PHI) flows into AI prompts. Architect the guardrails, not just the policy
- Maintain awareness of AI-specific incident response options; when something goes wrong with an AI integration, you're in the room
- Serve as IT Engineering's primary liaison to the AI Adoption Committee bringing operational grounding to adoption decisions
- Participate actively in the AI Working Group; connect platform capabilities to how the company actually uses them
- Partner closely with the Governance & Trust team, who leads AI policy and governance. Your job is to be their technical counterpart by implementing, informing, and flagging issues, not owning the policy itself
Skills
- Outstanding interpersonal skills and team-first mentality
- 8+ years in security engineering, IT engineering, or a DevOps role with meaningful security responsibility throughout
- Hands-on DevOps background: Git-based config management, CI/CD, infrastructure-as-code mindset applied to platform administration
- Direct, hands-on experience administering Claude (Anthropic) and/or ChatGPT (OpenAI) at an organizational level. This isn't a 'I use it every day' checkbox; we mean console administration, managed settings, and enterprise controls
- Working knowledge of AI risk factors: prompt injection, data leakage, agentic failure modes, and incident response options when AI systems behave unexpectedly
- Comfortable writing production-quality code in Python and/or TypeScript especially for dashboards, automation, and MCP server development
- Experience with GCP and Cloud native environments
- Familiarity with SSO/SCIM provisioning in SaaS-heavy environments (Okta or similar)
- Strong written communication; you'll be translating technical AI platform changes into clear guidance for non-technical stakeholders regularly
- Experience building or operating MCP (Model Context Protocol) servers
- Background in financial/spend analytics tooling or BI dashboard development
- Prior experience operating in a governance or compliance-adjacent role (you understand why Governance & Trust exists and you genuinely want to work with them)
- You've broken an AI integration badly enough to have opinions about how to do it right
Benefits
- Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.
- Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!).
- 100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck.
- ∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset.
- 18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year.
Company Overview
Company H1B Sponsorship