C

Chainguard

Builds hardened open-source software for developers

Staff Customer Success Manager - Majors, Financial Services

Full-Time
$200k/yr+ Bonus + Equity
Senior
Remote in USA
Remote
Customer Experience & SupportCustomer Success

About the job

Requirements
  • 5+ years in enterprise customer-facing roles, with a strong preference for experience in or adjacent to financial services.
  • Demonstrated ability to operate as a strategic business partner, not just a relationship manager; this means understanding customer business goals, navigating organizational complexity, and connecting Chainguard outcomes to measurable business value.
  • Familiarity with financial services regulatory and compliance drivers (SOC 2, FedRAMP, PCI DSS, operational resilience frameworks) and how they shape security buying decisions.
  • Working knowledge of one or more of the following domains: software supply chain security, vulnerability management, DevSecOps, container security, or application security; not required to be a technical implementer, but must speak credibly to business and security outcomes.
  • This is a high-autonomy role; you are expected to take full ownership of your portfolio, make independent decisions about account strategy and escalation, and build new playbooks when existing ones do not fit.
  • Strong executive presence and communication skills, both written and verbal.
  • High emotional intelligence, strong prioritization instincts, and comfort navigating ambiguity.
Responsibilities
  • Strategic Account Management: Build and maintain trusted relationships across customer organizations, from practitioner teams to CISOs and executive sponsors.
  • Customer Onboarding and Success Planning: Lead the business-focused elements of onboarding, including success planning, stakeholder alignment, and value delivery milestones; partner with Solutions Architects who own technical implementation to keep business and technical workstreams coordinated.
  • Executive Engagement: Lead and facilitate executive business reviews, strategic planning sessions, and escalation conversations; know when to bring in Chainguard's executive team and navigate complex stakeholder dynamics in large financial institutions.
  • Renewal and Expansion: Work with sales counterparts to identify expansion opportunities, mitigate renewal risk, and build multi-year account strategies grounded in demonstrated value.
  • Customer Advocacy: Represent the voice of the customer internally, translating customer needs into product and roadmap feedback; influence cross-functional teams including Product, Engineering, and Sales on behalf of accounts.
  • Issue Management: Coordinate with Technical Support and Engineering on escalations, serving as the business-facing lead while the Solutions Architect manages technical resolution.
Desired Qualifications
  • Prior experience managing strategic accounts at a cybersecurity or infrastructure software company.
  • Experience supporting or selling into financial services customers such as banks, asset managers, insurers, or fintechs.
  • Familiarity with the security and compliance obligations that shape procurement and adoption cycles in regulated industries.
  • Previous early-stage startup experience.

About the company

C

Chainguard

View
cbWebsite

Chainguard builds and maintains hardened open-source software for engineering and security teams that want to reduce exposure to vulnerable components. Its Containers provide application environments, while Libraries supply rebuilt code packages used by developers. The company builds these artifacts from source and updates them as upstream software changes, helping teams integrate maintained components into existing development and deployment workflows. Customers pay for container access by image catalog or engineering organization size, with language ecosystem licensing based on developer counts. Chainguard was founded in 2021 and is headquartered in Kirkland, Washington.

Company Size

201-500

Company Stage

Growth Equity (Venture Capital)

Total Funding

$892M

Headquarters

Kirkland, Washington

Founded

2021

Get referred to Chainguard

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Learning has dedicated funding: Chainguard provides employees an annual $1,500 professional-development budget.
  • Options allow more decision time: Chainguard gives employees a ten-year stock-option exercise window.
  • Customer savings support adoption: Shift5 estimates Chainguard saved over two months of maintenance work per engineer.

What critics are saying

  • Migration adds compatibility work: Chainguard packages cannot be mixed with Alpine Linux packages.
  • Support extends beyond office hours: Chainguard's US Senior Technical Support Engineer joins weekend and holiday on-call rotations.
  • Hardening has boundaries: Chainguard customers must patch applications and dependencies they add to its base images.

What makes Chainguard unique

  • Build history is verifiable: Chainguard attaches cryptographically signed provenance to its container images.
  • The container foundation is purpose-built: Chainguard maintains Wolfi, a community Linux distribution designed for containers.
  • Image construction is reproducible: Chainguard's apko builds container images from declarative configurations.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Equity/stock options
  • Unlimited Paid Time Off
  • Remote Work Options
  • Home Office Stipend
  • Health Insurance
  • Wellness Program

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

1%

2 year growth

9%
BizStack
Oct 17th, 2026
Chainguard launches hardened dev environments for AI agents.

Chainguard launches hardened dev environments for AI agents. Software supply chain security company Chainguard announced two beta products aimed at securing code produced by both human developers and AI agents. The announcements came at the company's Assemble London event. Get Free Daily Insights to Stay Ahead in Your Entrepreneurial Journey. Table of Contents The two products. Chainguard Workspaces provides remote development environments built on hardened microVMs. The goal is a contained, secured execution layer for running code regardless of whether a developer or an AI agent wrote it. Chainguard Checks moves continuous integration directly into the development loop rather than keeping it as a post-commit gate. Security feedback arrives earlier in the workflow. Why AI agents change the equation. AI coding agents write and execute code at a pace and volume that traditional CI pipelines weren't designed for. Hardened execution environments and tighter feedback loops are a reasonable response to that problem. Chainguard is positioning both products as infrastructure for that shift. Both products are currently in beta. No pricing details were announced. Cagri Sarigoz ( Founder) I'm founder of BizStack at Cagri Sarigoz LLC and a passionate advocate for entrepreneurs. With over 14 years in tech, marketing, and AI, including my role as Head of SEO at CitizenShipper and co-founder of TaleBot at Intale AI, I'm dedicated to sharing genuine, useful product insights and tips. At BizStack, I aim to cut through the digital noise to provide clear, actionable advice. And more than all else, I'm a father to a (always) little girl and a husband. Contact me at [email protected] for assistance.

PR Newswire
Oct 14th, 2026
Introducing Chainguard Libraries for Go and .NET: secure endpoints to protect organizations from supply chain attacks.

Introducing Chainguard Libraries for Go and .NET: secure endpoints to protect organizations from supply chain attacks. Oct 14, 2026, 01:00 ET Chainguard Libraries now includes CVE remediation for JavaScript and Go; customers also receive protections from frontier AI-discovered zero-days once they are made public SEATTLE, Oct. 14, 2026 /PRNewswire/ - Chainguard, the trusted source for open source, today announced Chainguard Libraries for Go and Chainguard Libraries for .NET, adding coverage for two new language ecosystems that allow engineering teams and AI agents to safely pull Go and .NET dependencies without being exposed to the next supply chain attack. Chainguard Libraries also now offers CVE remediation for JavaScript and Go, which backports upstream fixes for critical- and high-severity vulnerabilities, helping teams where upgrading to the next version is not always immediately possible. Finally, Chainguard Libraries now protects customers from zero-day vulnerabilities, with fixes available the day a vulnerability is made public. Through Athena's crowdsourced threat intelligence, Chainguard Libraries customers receive novel patches for zero-day vulnerabilities that have been discovered by the world's largest institutions pointing frontier AI models at their applications. Malware poses an increasing threat to open source dependencies AI has escalated problems that have plagued open source language libraries for years, and malware is at the front of that shift. According to Chainguard's AI Exploit Gap report, 76% of cybersecurity leaders say their organization has experienced, or suspects it has experienced, an AI-driven attack in the last 12 months. Within open source registries, attackers are publishing malicious packages, hijacking trusted packages, and registering the names of packages that do not exist yet, knowing developers and AI agents will install them without a second look. At the same time, AI makes it possible for anyone to build and publish malicious packages, or find a way to gain improper access to internal systems by exploiting CVEs or newly discovered zero-day vulnerabilities. The risks are not new, but they are increasingly impossible to manage at scale as models become more capable and widely available. "Attackers are counting on your developers and AI agents to trust every package they install," said Patrick Donahue, SVP of Product, Chainguard. "Chainguard Libraries removes the need for that trust. No malware gets in, CVEs get fixed even if you can't upgrade, and zero-days are patched on disclosure day. Prevention is the only defense that scales." Protecting organizations from AI-level threats to open source software Preventing malware from dependencies is only one part of a three-part problem. Organizations still need to worry about CVEs and zero-days that are becoming easier to discover and exploit as the capabilities of frontier AI models improve. Teams often pin dependencies to specific versions for stability, and CVEs build up in those versions over time. Meanwhile, frontier AI models are uncovering zero-days faster than open source maintainers can fix them. With today's announcement, Chainguard Libraries protects against all three threats across more of the languages organizations depend on: * Introducing Chainguard Libraries for Go with CVE remediation: Chainguard Libraries for Go gives cloud and infrastructure development teams a secure endpoint to pull Go packages, limiting their organization's exposure to malicious modules and reducing the number of CVEs they need to remediate. Go Libraries come with built-in scanning for malware and greyware, a class of nefarious open source packages that traditional malware scanners miss. They also include configurable policies that allow teams to block packages that don't meet their security or compliance standards, and CVE remediation. * Introducing Chainguard Libraries for .NET: Chainguard Libraries for .NET allows organizations building on top of the Microsoft and Azure ecosystems to trade NuGet for a secure-by-default Chainguard-managed endpoint, allowing them to safely pull dependencies without risking being compromised by the next supply chain attack...NET libraries come with configurable policies and malware and greyware scanning. * Enhancing JavaScript libraries with CVE remediation: Adding CVE remediation to Chainguard Libraries for JavaScript provides another layer of defense that reduces CVE risk. Backported fixes for critical- and high-severity CVEs allow engineering teams to shrink known vulnerability risk while strategically planning their next major version upgrade. The capability is built into the same endpoint that has blocked every malware attack that has hit npm this year. * Providing zero-day protection for Chainguard Libraries for Java and Python: Chainguard Libraries for Python and Java now have artifacts that are remediated from frontier AI model-discovered vulnerabilities on the day they are publicly disclosed. This protection is powered by the crowdsourced threat intelligence of Athena, Chainguard's industry coalition for the orchestrated defense of open source software. These advancements make Chainguard Libraries the most secure way to consume open source language dependencies. Chainguard Libraries helps organizations defend against the threats frontier AI models pose to open source software and to the AI software development lifecycle. "Chainguard Libraries has shifted us from reacting to supply chain attacks to preventing them. We have immediate visibility into what's coming into our environment, but more importantly, malicious packages never reach us in the first place," said Kevin Fuller, CISO, Propio. "It's not just detection, it's prevention. With constant attacks on open source, that has given our team a world of peace." Chainguard Libraries for Go and .NET are now available in Early Access. For more information, visit chainguard.dev/libraries. About Chainguard Chainguard is the trusted source for open source. By providing engineers and AI agents with hardened, trusted, and production-ready artifacts, Chainguard helps organizations prevent AI supply chain attacks, increase engineering velocity while reducing toil, and maintain continuous compliance. Customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, DocuSign, OpenAI, Public Storage, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. For more information, visit: https://www.chainguard.dev/ SOURCE Chainguard

PR Newswire
Oct 14th, 2026
Chainguard launches Harness, using frontier AI to find and fix proven vulnerabilities

Chainguard, a Seattle-based open source security company, has launched Chainguard Harness, a tool that uses frontier AI models such as Anthropic's Claude Mythos 5.1 to find and fix exploitable vulnerabilities in application code. Harness builds an app from a customer's source code in an isolated microVM and has the model probe the running instance. It reproduces each finding before delivering a fix reviewed by a Chainguard engineer, so teams act only on proven flaws. Customers can buy Harness through the Claude Marketplace and use part of their existing Anthropic commitment. At launch, Chainguard engineers run the tool on customers' behalf, and access is through a beta waitlist. "Every time we've pointed Harness at code, it has found serious, exploitable vulnerabilities," said chief executive officer Dan Lorenc.

PR Newswire
Oct 14th, 2026
Chainguard launches Workspaces, credential-free microVMs to run coding agents securely

Chainguard, a provider of trusted open source software, today launched Chainguard Workspaces, hardened microVMs that give each developer and coding agent a secure, isolated environment. The environments hold no sensitive credentials, and teams can set egress policies that block unapproved connections. Workspaces run remotely and sync a developer's local working tree, so developers keep their editor and git workflow. Each agent has its own environment, letting dozens run in parallel and carry out long migrations or refactors unattended. Security teams get a signed record of what each agent read, ran, and reached. Chief executive officer Dan Lorenc said teams now must choose between risky access and constant approval prompts, and Workspaces removes that tradeoff. Cuscal is an early design partner. Workspaces is available now in Beta.

Chainguard
Oct 14th, 2026
Introducing Chainguard Harness: Vulnerability hunting and remediation powered by Claude Mythos 5.1, no model access required.

Introducing Chainguard Harness: Vulnerability hunting and remediation powered by Claude Mythos 5.1, no model access required. Sam Katzen Director, Product Marketing Today, Chainguard, Inc. is introducing Chainguard Harness, a new offering that uses frontier AI models like Anthropic's Claude Mythos 5.1 to hunt down exploitable vulnerabilities in an organization's application code and create a validated, reproducible report with recommended fixes. Alongside the introduction of Harness, Chainguard, Inc. is also announcing its availability through the Claude Marketplace by Anthropic, allowing organizations to put a portion of their existing Anthropic commitment toward finding and fixing exploitable vulnerabilities. Chainguard, Inc. is opening the beta waitlist for Chainguard Harness today. Frontier models that perform vulnerability discovery across first-party and open source code have been mostly available to a select group of organizations performing defensive security work for critical infrastructure. Chainguard Harness is now bringing a frontier harness to organizations that lack access or the security and engineering expertise to do so in the face of growing threats from open weight models. Frontier vulnerability hunting, run by Chainguard. The Chainguard Factory already takes the open source software the world relies on and safely rebuilds it from scratch in hardened, isolated environments. Chainguard Harness applies the same level of rigor to frontier vulnerability discovery and remediation. Chainguard, Inc. designed a custom harness around these advanced AI models. Rather than just scanning static code, Chainguard Harness builds the application from source, and the model actively attacks the live, running instance of your app, exactly like a real attacker would. Here's how the process works: * Connect your repositories. Use the Chainguard GitHub App to share repositories with Chainguard, granting read-only access to the repositories, or upload a source archive. * Rebuild in isolation. Chainguard Harness builds your application from source exactly as it would ship to production and boots it up inside a secure, isolated microVM. * Hunt for exploits. Mythos 5.1 actively probes the running application, looking for vulnerabilities such as logic flaws, injection, and resource exhaustion. It works from your source, git history, dependency source and build configuration, and watches how the live application responds. * Prove every finding. Every exploit is replayed in a fresh microVM. If it doesn't land every time, it doesn't make the report. Chainguard, Inc. also confirm that each recommended fix closes the vulnerability: the exploit has to succeed against your current code and fail against the fix. * Deliver the fix. Chainguard provides you with reliable steps to reproduce the issue alongside a custom fix written specifically for your codebase. You get a written report covering: * An executive summary * The severity and impact of each finding * The steps to confirm each finding * A recommended fix written for your codebase Isolated by design. Pointing a frontier model at real code demands a harness built for containment, which Harness managed in two distinct phases. The first is a setup phase, which involves a separate model building your application, fetching its dependencies and tooling, and getting it running inside the microVM. The microVM is then suspended. Next comes the hunting phase. The microVM resumes for Mythos 5.1 with no network egress and no credentials inside. The model works only with a shell and packages built by Chainguard. The agent loop runs outside the sandbox, so every tool call and command the model issues is logged and observable. Chainguard, Inc. also treat the code under test as untrusted data, which guards against prompt injection hidden in the code being analyzed. Your report describes each issue and how to confirm it, not a working attack. Beyond its approach to containment, Chainguard Harness combines a broad set of engineering innovations to safely and securely discover and help fix exploitable vulnerabilities: * Live application testing: Evaluates active, running behavior rather than static code to uncover real-world runtime flaws and logic bugs in both first and third-party code. * Reproducible findings: Every exploit is replayed until it lands every time, and every recommended fix is checked against the exploit it's meant to stop. Your team only spends time on what's real. * Bespoke fixes across open source and first-party code: Custom recommendations and reporting across the complete code base give security and engineering teams a path to secure code, rather than a list of risks. * Human review on every fix: A named Chainguard engineer reviews and approves every fix and report before it reaches you. * Upstream disclosure: If Chainguard, Inc. discover a flaw in an open source dependency rather than your own code, Chainguard, Inc. handle the coordinated disclosure process directly with the upstream maintainers. Once it's resolved upstream, the patched build ships seamlessly via Chainguard Repository. Peace of mind without the resource burden. Chainguard Harness gives security and engineering teams the visibility and actionability of frontier AI scanning without the resource, expertise, or risk burdens of managing it in-house: * Catch risks before attackers do: Proactively find and patch exploitable vulnerabilities across your custom code and open source dependencies, including those runtime bugs that traditional static scanners miss. * Focus engineering time on actual problems: Reproducible findings focus team attention and resources on the most actionable issues, and since every fix is written specifically for your code, engineers can review and ship the patch instead of researching it from scratch. * Get top-tier results without the massive costs: You don't need to secure API access to expensive models, build and secure your own testing harness, hire AI specialists, or burn cash on token fees while trying to get things working. Powered by Claude, available on the Claude Marketplace. Chainguard Harness is powered by Anthropic's most advanced models like Mythos 5.1, and built for safe and responsible use. Only Chainguard staff operate the model, and no one outside Chainguard can instruct it or see its raw output. Every deliverable is reviewed and approved by a named Chainguard engineer before it reaches you. You'll be able to find and purchase Chainguard Harness directly through the Claude Marketplace, right alongside the other Claude-powered tools your team is already using. This makes high-end, AI-driven security accessible to vastly more teams. Chainguard, Inc. is opening access to a limited group of organizations first. You can sign up for the beta waitlist today to save your spot.