Senior Product Manager, Malware Detection

About the company

Chainguard provides hardened, production-ready open-source software builds that help organizations secure their software supply chains by default.

About this role

<div class="content-intro"><p>Chainguard is the trusted source for open source. By delivering hardened, secure, and production-ready builds of all the open source software engineers and AI agents rely on, Chainguard helps organizations build faster, stay compliant, and eliminate risk.&nbsp;<br><br>Our customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, Fortinet, Hewlett Packard Enterprise, OpenAI, Snap Inc., and Snowflake. <br><br>Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital.</p></div><h3><strong>Senior Product Manager, Malware Detection</strong></h3> <p><strong>The role, in a nutshell:</strong></p> <p>Chainguard is building the most trusted source for open source software. Every artifact Chainguard distributes is evaluated by our scanner before it reaches a customer. It determines whether a package, container, or AI agent skill is safe to use—and sits between our customers and compromised software.</p> <p>What began as a high-leverage internal system has become a core platform powering Chainguard Libraries, Containers, Agent Skills, and future products. We're hiring the first Product Manager dedicated to this platform.</p> <p>You'll own detection quality, platform strategy, and the customer experience around scanning. You'll partner closely with Engineering and Product Security to define how organizations evaluate software trust in an AI-driven world.</p> <h3><strong>What you'll own:</strong></h3> <p><strong>Detection Quality</strong></p> <ul> <li>Own coverage, precision, and delivery of core product metrics.</li> <li>Drive the feedback loop between Engineering and Product Security to continuously improve detection quality.</li> <li>Build workflows for reviewing, escalating, and correcting detections quickly.</li> </ul> <p><strong>Scanner Platform</strong></p> <ul> <li>Define the roadmap for Chainguard's shared scanning platform.</li> <li>Scale the scanner beyond Libraries to Containers, Agent Skills, and future artifact types.</li> <li>Balance investments in detection quality, performance, and extensibility.</li> </ul> <p><strong>Threat Detection</strong></p> <ul> <li>Expand malware and greyware detection capabilities.</li> <li>Partner with Product Security to identify emerging threats and publish actionable intelligence.</li> </ul> <p><strong>Customer Experience</strong></p> <ul> <li>Define how customers investigate, enforce, and appeal scanner findings.</li> <li>Build intuitive workflows for policy management and enterprise-scale operations.</li> </ul> <h3><strong>What we're looking for:</strong></h3> <ul> <li>5+ years of Product Management experience with a strong track record building developer tools, infrastructure, security, or platform products.</li> <li>Experience owning highly technical platforms or backend infrastructure that supports multiple products or internal customers.</li> <li>Strong understanding of software supply chain security, malware detection, vulnerability management, or adjacent security domains.</li> <li>Demonstrated success making product prioritization decisions in technically complex and ambiguous environments.</li> <li>Excellent cross-functional leadership skills with the ability to influence Engineering, Security, Design, and GTM partners.</li> <li>Experience taking products or platform capabilities from early concept through customer adoption and iterative improvement.</li> <li>Strong technical credibility—you don't need to write production code, but you should be comfortable discussing architecture, distributed systems, APIs, and security concepts with engineering teams.</li> </ul> <h3><strong>Nice to haves</strong></h3> <ul> <li>Experience with malware detection, static analysis, software composition analysis (SCA), or vulnerability scanning.</li> <li>Familiarity with package ecosystems such as npm, PyPI, Maven, Go modules, or container registries.</li> <li>Experience building reusable platform capabilities that support multiple products.</li> <li>Background in cloud infrastructure, software supply chain security, or enterprise security platforms.</li> <li>Experience working with AI-assisted security analysis or automated threat detection systems.</li> </ul> <p><strong>Explore Our Work</strong></p> <p>Dive into the practical side of what we do at Chainguard. These resources provide a hands-on look at our processes and offer an opportunity for in-depth understanding of our product offerings and the technology behind them.</p> <ul> <li><a href="https://edu.chainguard.dev/">Chainguard Academy&nbsp;</a></li> <li><a href="https://www.chainguard.dev/">https://www.chainguard.dev</a></li> </ul><div class="content-pay-transparency"><div class="pay-input"><div class="title">Base Salary Range</div><div class="pay-range"><span>$205,000</span><span class="divider">—</span><span>$231,000 USD</span></div></div></div><div class="content-conclusion"><h3>About Us</h3> <p>We live and breathe our company values:</p> <ul> <li>We are customer obsessed — We focus on delivering solutions to our customers that create value and make their lives better.</li> <li>We have a bias for intentional action — We prioritize, plan, try things, and fail fast.</li> <li>We don't take ourselves too seriously (but we do serious work) — We are solving an important problem which takes focus, but we also like to enjoy the journey.</li> <li>We trust each other and assume good intentions — We're transparent with decisions to empower team members to make well informed decisions.</li> </ul> <p>A few of the benefits we offer:</p> <ul> <li><strong>Flexible &amp; Remote-First Culture:</strong> Work remotely with team meetup opportunities, bi-annual destination summits, and a monthly stipend for coworking spaces, phone and internet costs.</li> <li><strong>Our Approach to Equity:</strong> Receive stock options upon hire a