Senior Product Manager, Malware Detection

The role, in a nutshell:

Chainguard is building the most trusted source for open source software. Every artifact Chainguard distributes is evaluated by our scanner before it reaches a customer. It determines whether a package, container, or AI agent skill is safe to use—and sits between our customers and compromised software.

What began as a high-leverage internal system has become a core platform powering Chainguard Libraries, Containers, Agent Skills, and future products. We're hiring the first Product Manager dedicated to this platform.

You'll own detection quality, platform strategy, and the customer experience around scanning. You'll partner closely with Engineering and Product Security to define how organizations evaluate software trust in an AI-driven world.

Detection Quality

• Own coverage, precision, and delivery of core product metrics.
• Drive the feedback loop between Engineering and Product Security to continuously improve detection quality.
• Build workflows for reviewing, escalating, and correcting detections quickly.

Scanner Platform

• Define the roadmap for Chainguard's shared scanning platform.
• Scale the scanner beyond Libraries to Containers, Agent Skills, and future artifact types.
• Balance investments in detection quality, performance, and extensibility.

Threat Detection

• Expand malware and greyware detection capabilities.
• Partner with Product Security to identify emerging threats and publish actionable intelligence.

Customer Experience

• Define how customers investigate, enforce, and appeal scanner findings.
• Build intuitive workflows for policy management and enterprise-scale operations.

• 5+ years of Product Management experience with a strong track record building developer tools, infrastructure, security, or platform products.
• Experience owning highly technical platforms or backend infrastructure that supports multiple products or internal customers.
• Strong understanding of software supply chain security, malware detection, vulnerability management, or adjacent security domains.
• Demonstrated success making product prioritization decisions in technically complex and ambiguous environments.
• Excellent cross-functional leadership skills with the ability to influence Engineering, Security, Design, and GTM partners.
• Experience taking products or platform capabilities from early concept through customer adoption and iterative improvement.
• Strong technical credibility—you don't need to write production code, but you should be comfortable discussing architecture, distributed systems, APIs, and security concepts with engineering teams.

• Experience with malware detection, static analysis, software composition analysis (SCA), or vulnerability scanning.
• Familiarity with package ecosystems such as npm, PyPI, Maven, Go modules, or container registries.
• Experience building reusable platform capabilities that support multiple products.
• Background in cloud infrastructure, software supply chain security, or enterprise security platforms.
• Experience working with AI-assisted security analysis or automated threat detection systems.

Explore Our Work

Dive into the practical side of what we do at Chainguard. These resources provide a hands-on look at our processes and offer an opportunity for in-depth understanding of our product offerings and the technology behind them.

• Chainguard Academy 
• https://www.chainguard.dev