Senior OS Engineer – Linux Security, Container Supply Chain

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, and sustain secure components of Linux-based operating systems.

• Take ownership of complete CVE remediation for Linux OS packages and system libraries.

• Assess vulnerabilities impacting core OS components.

• Verify upstream fixes and establish strategies for patching or backporting.

• Create and uphold secure, minimal, production-ready container images.

• Generate and manage SBOMs for OS packages and container images.

• Design and scale automated workflows for OS patching, package rebuilding, and image creation.

• Collaborate with platform, DevOps, infrastructure, and security teams.

⛳️ Requirements

• Over 5 years of experience in Linux systems engineering, OS engineering, platform engineering, DevSecOps, or release engineering.

• Profound knowledge of Linux operating systems and distributions (Debian, RHEL, Ubuntu, Alpine).

• Extensive experience with OS package management systems (apt, rpm, dnf, apk).

• Practical experience in patching, rebuilding, or maintaining OS packages.

• Strong comprehension of Linux internals (processes, memory, filesystem, system libraries).

• Experience with system-level libraries and dependencies (glibc, openssl, etc.).

• In-depth understanding of dependency resolution, ABI compatibility, and package lifecycle management.

• Familiarity with container internals and Linux runtime behavior.

• Experience in remediating CVEs within OS packages and container environments.

• Knowledge of SBOMs, software provenance, signing, and artifact trust models.

• Awareness of supply chain security frameworks (e.g., SLSA, reproducible builds).

• Strong scripting or programming skills in Python, Bash, Go, or C/C++.

🏝️ Benefits

• Health, dental, and vision insurance.

• Paid time off.

• Equity participation.