C

Chainguard

Builds hardened open-source software for developers

Public Sector Account Executive - Civilian

Full-TimeUpdated on 10/23/2026
No salary listed
Senior, Expert
Virginia, USA
RemoteRemote role; team meetup opportunities and bi-annual destination summits.
Sales & Account ManagementAccount Executive

About the job

Requirements
  • At least 8–10 years of experience selling complex technical products to federal organizations.
  • At least 5 years of closing experience in the SaaS, security, or DevOps industry.
  • At least 5 years of experience covering Federal Healthcare, HHS, VA, and DHA.
  • A track record of building pipeline and consistently closing revenue.
  • Experience using disciplined sales processes such as MEDDPICC or similar frameworks.
  • Ability to identify customer pain and sell based on measurable business value.
  • Experience navigating multi-stakeholder buying cycles, from technical teams to executives.
  • Strong deal management and forecasting discipline across complex opportunities.
  • Ability to operate in fast-growing environments with evolving processes.
Responsibilities
  • Own the full sales cycle with federal customers, from prospecting through close.
  • Build and manage pipeline within a defined set of federal accounts.
  • Lead discovery, qualification, and deal strategy using frameworks such as MEDDPICC.
  • Communicate Chainguard’s value to technical stakeholders, security leaders, and executive buyers.
  • Partner with Sales Engineering, the Public Sector Partner Team, and Customer Engineering to support evaluations and technical validation.
  • Manage complex federal sales cycles, including procurement, security reviews, and negotiations.
  • Maintain accurate pipeline visibility and forecasting.
  • Consistently meet or exceed revenue and pipeline targets.
Desired Qualifications
  • Domain experience with one or more of the following: compute platforms such as Kubernetes, Docker, AWS, Azure, and Google Cloud; DevOps tooling; CI/CD platforms such as GitHub, GitLab, and Jenkins; and the overall software development life cycle.
  • Startup experience.
  • A strong sales aptitude and fundamental understanding of the sales process.
  • Tech-savvy business acumen and the ability to articulate a compelling value proposition in a complex and evolving business environment.
  • Ability to thrive in an agile environment with an evolving set of solutions.

About the company

Chainguard builds and maintains hardened open-source software for engineering and security teams that want to reduce exposure to vulnerable components. Its Containers provide application environments, while Libraries supply rebuilt code packages used by developers. The company builds these artifacts from source and updates them as upstream software changes, helping teams integrate maintained components into existing development and deployment workflows. Customers pay for container access by image catalog or engineering organization size, with language ecosystem licensing based on developer counts. Chainguard was founded in 2021 and is headquartered in Kirkland, Washington.

Company Size

201-500

Company Stage

Growth Equity (Venture Capital)

Total Funding

$892M

Headquarters

Kirkland, Washington

Founded

2021

Get referred to Chainguard

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Learning has dedicated funding: Chainguard provides employees an annual $1,500 professional-development budget.
  • Options allow more decision time: Chainguard gives employees a ten-year stock-option exercise window.
  • Customer savings support adoption: Shift5 estimates Chainguard saved over two months of maintenance work per engineer.

What critics are saying

  • Migration adds compatibility work: Chainguard packages cannot be mixed with Alpine Linux packages.
  • Support extends beyond office hours: Chainguard's US Senior Technical Support Engineer joins weekend and holiday on-call rotations.
  • Hardening has boundaries: Chainguard customers must patch applications and dependencies they add to its base images.

What makes Chainguard unique

  • Build history is verifiable: Chainguard attaches cryptographically signed provenance to its container images.
  • The container foundation is purpose-built: Chainguard maintains Wolfi, a community Linux distribution designed for containers.
  • Image construction is reproducible: Chainguard's apko builds container images from declarative configurations.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Equity/stock options
  • Unlimited Paid Time Off
  • Remote Work Options
  • Home Office Stipend
  • Health Insurance
  • Wellness Program

Growth & Insights and Company News

6 month growth

0%

1 year growth

1%

2 year growth

9%
The London Business Journal
Oct 20th, 2026
From silicon valley to Clerkenwell: Chainguard makes London The centre of its $200M expansion.

From silicon valley to Clerkenwell: Chainguard makes London The centre of its $200M expansion. $200M, 200 jobs and A new London hq: Chainguard bets big on Europe's AI cybersecurity market. US cybersecurity company Chainguard has announced a $200 million investment commitment across Europe, the Middle East and Africa, alongside plans to create 200 regional roles and establish a new London headquarters for its EMEA operations. The expansion follows reported annual recurring revenue growth of more than 400% and an 800% increase in its regional customer base as businesses seek stronger protection against software supply-chain attacks. London has secured another significant international technology investment as cybersecurity specialist Chainguard commits $200 million to expanding its operations across Europe, the Middle East and Africa. The company, which specialises in securing open-source software, has selected Clerkenwell as the headquarters for its EMEA business, with a new office at 3 Herbal Hill. The expansion includes plans for 200 additional roles across engineering, sales and customer success throughout the region. Chainguard says the investment reflects rising demand for software security as artificial intelligence changes how vulnerabilities can be discovered and exploited. For London, the announcement adds to the capital's position as a centre for international cybersecurity companies seeking access to European customers, specialist technology talent and financial services businesses. $200 million behind the expansion. Chainguard established its EMEA presence in October 2023 and says its regional business has expanded rapidly since then. Over the past 12 months, annual recurring revenue in EMEA increased by more than 400%, while its customer base grew by 800%. The company has not disclosed the underlying revenue figures or the starting number of regional customers, making it difficult to assess the absolute scale of that growth. Nevertheless, the expansion indicates strong commercial momentum in a cybersecurity market where organisations are increasingly concerned about the security of third-party software. Chainguard now serves more than 800 customers worldwide, including major technology and industrial businesses. Its EMEA customers include Aleph Alpha, Cato Networks and Siemens. Why AI is changing the cybersecurity market. The company's investment is driven partly by the growing security challenges associated with open-source software. Modern applications frequently depend on externally developed software components, which can contain vulnerabilities that organisations did not introduce themselves. Chainguard cites industry research indicating that open-source software accounts for more than 90% of the code in modern applications. The concern is that artificial intelligence could make it easier for attackers to identify weaknesses and combine multiple vulnerabilities into effective attacks. While the speed and capabilities of individual AI systems vary, advances in automated code analysis have increased pressure on organisations to strengthen software security before vulnerabilities can be exploited. Ian Burley, Group Vice President, EMEA, at Chainguard, believes conventional approaches are becoming inadequate. "Pulling open source straight from public registries is like picking a USB stick up off the pavement and plugging it into your laptop. Maybe you could survive that when finding a flaw took a human engineer months, but you can't now that a model does it in an afternoon." The company's approach centres on providing hardened, production-ready software components designed to reduce vulnerabilities before applications are deployed. Its proposition is that prevention can reduce the amount of time engineering teams spend identifying and fixing security problems after software has entered production. London becomes the regional command centre. Chainguard's new Clerkenwell office will act as its EMEA hub. The location will provide a base for nearly 70 employees already working in the UK, while supporting regional customers, partners and the wider open-source community. Although the company operates a remote-first employment model, the London office will provide a physical centre for collaboration and customer engagement. Burley was appointed earlier in 2026 to lead Chainguard's regional commercial strategy. He brings approximately 20 years of experience in business-to-business software, including roles associated with Benchling, Snowflake and BMC Software. The planned 200 additional positions will be distributed across EMEA rather than exclusively located in London. Chainguard has not specified how many of the new roles will be based in Britain or provided a detailed timetable for recruitment. Burley said: "Some of the best engineering and security teams we work with are in EMEA, and they know prevention is the only option. We're putting $200 million, a London office, and 200 new roles behind them, so more organisations across EMEA can put an end to AI supply chain attacks." Regulation adds to the commercial opportunity. The expansion comes as European organisations face increasing scrutiny over software security and operational resilience. Relevant requirements include the EU's Digital Operational Resilience Act, the NIS2 Directive and the Cyber Resilience Act, alongside payment security standards such as PCI DSS. These frameworks do not impose identical obligations on every organisation, but they contribute to growing demand for stronger security controls, supply-chain oversight and evidence of compliance. The financial services, healthcare and critical infrastructure sectors are particularly sensitive to disruptions affecting essential systems. For suppliers such as Chainguard, the opportunity extends beyond helping companies identify vulnerabilities. Customers increasingly want to demonstrate that the software components they use have been produced, maintained and deployed through reliable processes. Global shipping group highlights customer demand. One of Chainguard's customers is international shipping group Hapag-Lloyd, which uses the company's technology as part of its software security arrangements. Daniel Höpfner, Chief Architect and Head of Cloud Engineering at Hapag-Lloyd, said: "By fundamentally reducing supply chain risk in our platforms with Chainguard, we strengthened the reliability of a system that supports global shipping operations across hundreds of ports and thousands of daily transactions. Just as importantly, we achieved this without diverting engineering capacity from our broader Freight Information System transformation." "That balance between resilience, scalability, and execution speed is what makes working with Chainguard truly valuable for Hapag-Lloyd." The example illustrates the potential business impact of software supply-chain security in industries where digital systems support large-scale commercial operations. The next phase of growth. Chainguard was named a Leader in the inaugural Gartner Magic Quadrant for Software Supply Chain Security in June 2026, according to the company's announcement. Its global customer base includes Canva, DocuSign, OpenAI, Snap and Snowflake. The company is backed by venture capital investors including Sequoia Capital, Lightspeed Venture Partners and Kleiner Perkins. Its latest commitment represents a substantial expansion of its regional ambitions, although the $200 million figure is a multi-year EMEA investment rather than a confirmed amount being spent immediately in London. The business will now need to translate rapid percentage growth into sustained revenue, customer retention and successful regional recruitment. For the UK technology sector, the announcement provides another example of an international software company selecting London as its operational base for a wider European and regional market. As artificial intelligence accelerates software development and changes the cybersecurity threat landscape, Chainguard is betting that businesses will spend more on preventing vulnerabilities from entering their systems in the first place. Its $200 million commitment suggests it expects that demand to continue growing.

BizStack
Oct 17th, 2026
Chainguard launches hardened dev environments for AI agents.

Chainguard launches hardened dev environments for AI agents. Software supply chain security company Chainguard announced two beta products aimed at securing code produced by both human developers and AI agents. The announcements came at the company's Assemble London event. Get Free Daily Insights to Stay Ahead in Your Entrepreneurial Journey. Table of Contents The two products. Chainguard Workspaces provides remote development environments built on hardened microVMs. The goal is a contained, secured execution layer for running code regardless of whether a developer or an AI agent wrote it. Chainguard Checks moves continuous integration directly into the development loop rather than keeping it as a post-commit gate. Security feedback arrives earlier in the workflow. Why AI agents change the equation. AI coding agents write and execute code at a pace and volume that traditional CI pipelines weren't designed for. Hardened execution environments and tighter feedback loops are a reasonable response to that problem. Chainguard is positioning both products as infrastructure for that shift. Both products are currently in beta. No pricing details were announced. Cagri Sarigoz ( Founder) I'm founder of BizStack at Cagri Sarigoz LLC and a passionate advocate for entrepreneurs. With over 14 years in tech, marketing, and AI, including my role as Head of SEO at CitizenShipper and co-founder of TaleBot at Intale AI, I'm dedicated to sharing genuine, useful product insights and tips. At BizStack, I aim to cut through the digital noise to provide clear, actionable advice. And more than all else, I'm a father to a (always) little girl and a husband. Contact me at [email protected] for assistance.

PR Newswire
Oct 14th, 2026
Introducing Chainguard Libraries for Go and .NET: secure endpoints to protect organizations from supply chain attacks.

Introducing Chainguard Libraries for Go and .NET: secure endpoints to protect organizations from supply chain attacks. Oct 14, 2026, 01:00 ET Chainguard Libraries now includes CVE remediation for JavaScript and Go; customers also receive protections from frontier AI-discovered zero-days once they are made public SEATTLE, Oct. 14, 2026 /PRNewswire/ - Chainguard, the trusted source for open source, today announced Chainguard Libraries for Go and Chainguard Libraries for .NET, adding coverage for two new language ecosystems that allow engineering teams and AI agents to safely pull Go and .NET dependencies without being exposed to the next supply chain attack. Chainguard Libraries also now offers CVE remediation for JavaScript and Go, which backports upstream fixes for critical- and high-severity vulnerabilities, helping teams where upgrading to the next version is not always immediately possible. Finally, Chainguard Libraries now protects customers from zero-day vulnerabilities, with fixes available the day a vulnerability is made public. Through Athena's crowdsourced threat intelligence, Chainguard Libraries customers receive novel patches for zero-day vulnerabilities that have been discovered by the world's largest institutions pointing frontier AI models at their applications. Malware poses an increasing threat to open source dependencies AI has escalated problems that have plagued open source language libraries for years, and malware is at the front of that shift. According to Chainguard's AI Exploit Gap report, 76% of cybersecurity leaders say their organization has experienced, or suspects it has experienced, an AI-driven attack in the last 12 months. Within open source registries, attackers are publishing malicious packages, hijacking trusted packages, and registering the names of packages that do not exist yet, knowing developers and AI agents will install them without a second look. At the same time, AI makes it possible for anyone to build and publish malicious packages, or find a way to gain improper access to internal systems by exploiting CVEs or newly discovered zero-day vulnerabilities. The risks are not new, but they are increasingly impossible to manage at scale as models become more capable and widely available. "Attackers are counting on your developers and AI agents to trust every package they install," said Patrick Donahue, SVP of Product, Chainguard. "Chainguard Libraries removes the need for that trust. No malware gets in, CVEs get fixed even if you can't upgrade, and zero-days are patched on disclosure day. Prevention is the only defense that scales." Protecting organizations from AI-level threats to open source software Preventing malware from dependencies is only one part of a three-part problem. Organizations still need to worry about CVEs and zero-days that are becoming easier to discover and exploit as the capabilities of frontier AI models improve. Teams often pin dependencies to specific versions for stability, and CVEs build up in those versions over time. Meanwhile, frontier AI models are uncovering zero-days faster than open source maintainers can fix them. With today's announcement, Chainguard Libraries protects against all three threats across more of the languages organizations depend on: * Introducing Chainguard Libraries for Go with CVE remediation: Chainguard Libraries for Go gives cloud and infrastructure development teams a secure endpoint to pull Go packages, limiting their organization's exposure to malicious modules and reducing the number of CVEs they need to remediate. Go Libraries come with built-in scanning for malware and greyware, a class of nefarious open source packages that traditional malware scanners miss. They also include configurable policies that allow teams to block packages that don't meet their security or compliance standards, and CVE remediation. * Introducing Chainguard Libraries for .NET: Chainguard Libraries for .NET allows organizations building on top of the Microsoft and Azure ecosystems to trade NuGet for a secure-by-default Chainguard-managed endpoint, allowing them to safely pull dependencies without risking being compromised by the next supply chain attack...NET libraries come with configurable policies and malware and greyware scanning. * Enhancing JavaScript libraries with CVE remediation: Adding CVE remediation to Chainguard Libraries for JavaScript provides another layer of defense that reduces CVE risk. Backported fixes for critical- and high-severity CVEs allow engineering teams to shrink known vulnerability risk while strategically planning their next major version upgrade. The capability is built into the same endpoint that has blocked every malware attack that has hit npm this year. * Providing zero-day protection for Chainguard Libraries for Java and Python: Chainguard Libraries for Python and Java now have artifacts that are remediated from frontier AI model-discovered vulnerabilities on the day they are publicly disclosed. This protection is powered by the crowdsourced threat intelligence of Athena, Chainguard's industry coalition for the orchestrated defense of open source software. These advancements make Chainguard Libraries the most secure way to consume open source language dependencies. Chainguard Libraries helps organizations defend against the threats frontier AI models pose to open source software and to the AI software development lifecycle. "Chainguard Libraries has shifted us from reacting to supply chain attacks to preventing them. We have immediate visibility into what's coming into our environment, but more importantly, malicious packages never reach us in the first place," said Kevin Fuller, CISO, Propio. "It's not just detection, it's prevention. With constant attacks on open source, that has given our team a world of peace." Chainguard Libraries for Go and .NET are now available in Early Access. For more information, visit chainguard.dev/libraries. About Chainguard Chainguard is the trusted source for open source. By providing engineers and AI agents with hardened, trusted, and production-ready artifacts, Chainguard helps organizations prevent AI supply chain attacks, increase engineering velocity while reducing toil, and maintain continuous compliance. Customers include Fortune 500 enterprises and global industry leaders, including Anduril, Canva, DocuSign, OpenAI, Public Storage, Snap Inc., and Snowflake. Chainguard is venture-backed by leading investors, including Amplify, IVP, Kleiner Perkins, Lightspeed Venture Partners, Mantis VC, Redpoint Ventures, Sequoia Capital, and Spark Capital. For more information, visit: https://www.chainguard.dev/ SOURCE Chainguard

PR Newswire
Oct 14th, 2026
Chainguard launches Harness, using frontier AI to find and fix proven vulnerabilities

Chainguard, a Seattle-based open source security company, has launched Chainguard Harness, a tool that uses frontier AI models such as Anthropic's Claude Mythos 5.1 to find and fix exploitable vulnerabilities in application code. Harness builds an app from a customer's source code in an isolated microVM and has the model probe the running instance. It reproduces each finding before delivering a fix reviewed by a Chainguard engineer, so teams act only on proven flaws. Customers can buy Harness through the Claude Marketplace and use part of their existing Anthropic commitment. At launch, Chainguard engineers run the tool on customers' behalf, and access is through a beta waitlist. "Every time we've pointed Harness at code, it has found serious, exploitable vulnerabilities," said chief executive officer Dan Lorenc.

PR Newswire
Oct 14th, 2026
Chainguard launches Workspaces, credential-free microVMs to run coding agents securely

Chainguard, a provider of trusted open source software, today launched Chainguard Workspaces, hardened microVMs that give each developer and coding agent a secure, isolated environment. The environments hold no sensitive credentials, and teams can set egress policies that block unapproved connections. Workspaces run remotely and sync a developer's local working tree, so developers keep their editor and git workflow. Each agent has its own environment, letting dozens run in parallel and carry out long migrations or refactors unattended. Security teams get a signed record of what each agent read, ran, and reached. Chief executive officer Dan Lorenc said teams now must choose between risky access and constant approval prompts, and Workspaces removes that tradeoff. Cuscal is an early design partner. Workspaces is available now in Beta.