Senior Software Engineer – Container Images, Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, construct, and maintain streamlined, fortified container images across various Linux distributions and application environments.

• Take ownership of the complete CVE remediation process for OS packages, libraries, runtimes, and dependencies, which includes analysis, patching, rebuilding, and validating.

• Resolve intricate issues related to package compatibility, dependencies, builds, and runtime while ensuring the functionality of applications.

• Minimize the attack surface and size of images by eliminating unnecessary packages, binaries, and dependencies.

• Develop and enhance automated workflows for image creation, vulnerability scanning, remediation, testing, and publishing.

• Create tools to manage image versioning, update dependencies, handle metadata, and ensure release traceability.

• Generate, verify, and maintain Software Bill of Materials (SBOMs) to facilitate software supply chain transparency and compliance.

• Verify image functionality, reproducibility, and compatibility with Kubernetes and other containerized platforms.

• Collaborate with platform, infrastructure, and security teams to establish image hardening standards and integrate curated images into development and deployment processes.

• Maintain comprehensive documentation that assists developers in adopting and utilizing curated images.

• Continuously enhance remediation speed, image quality, build reliability, and operational efficiency.

⛳️ Requirements

• U.S. citizenship is required for this role due to the nature of work involving federal government clients.

• A minimum of 5 years of pertinent experience in software engineering, Linux systems engineering, platform engineering, DevSecOps, or Site Reliability Engineering (SRE).

• In-depth knowledge of Linux systems, with practical experience across distributions such as Debian, Ubuntu, Alpine, or RHEL.

• Significant experience in building and optimizing Docker images, including multi-stage builds, image layering, and container filesystem structures.

• Demonstrated experience in investigating and addressing CVEs in Linux packages and container images, including patching, rebuilding, and validating solutions.

• Strong understanding of Linux package management and dependency resolution utilizing tools such as apt, apk, yum/dnf, or rpm.

• Proficient programming or scripting abilities in Python, Go, or Bash, with experience in creating maintainable automation and internal tools.

• Experience in developing and managing CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, or similar platforms.

• Practical experience with vulnerability scanning tools like Trivy, Grype, or Clair, along with SBOM generation.

• Solid understanding of Kubernetes fundamentals, container lifecycles, and image deployment prerequisites.

• Capability to independently troubleshoot complex technical challenges and collaborate effectively with engineering teams.

🏝️ Benefits

• Equity participation.

• Comprehensive health, dental, and vision insurance.

• Remote-first work environment.

• Opportunity to tackle intricate Linux, container, and software supply chain security challenges.

• Career advancement opportunities within a rapidly growing cybersecurity organization.