Senior Software Engineer, Patch Engineering – Vulnerability Remediation

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Construct and uphold a fortified release pipeline that generates container images with stringent scan thresholds, reproducible builds, and a minimized attack surface.

• Develop an automated vulnerability triage system that processes scanner outputs, eliminates duplicate findings, assigns findings to responsible parties, and monitors SLA compliance.

• Create tooling for provenance and exploitability that generates SBOMs and VEX statements for each release.

• Implement a scalable remediation strategy utilizing AI and automation to address vulnerability findings.

• Take ownership of the hardened image pipeline for high-demand deployments and reduce remediation times for critical and high findings to adhere to published SLAs.

• Transition from reactive vulnerability management to an automated process that efficiently moves from scan to resolution.

• Maintain documentation of evidence-based engineering decisions regarding vulnerabilities that will not be remediated.

• Define the technical direction and tooling for future team enhancements.

⛳️ Requirements

• Proven experience in shipping and maintaining software or container images in regulated, on-premises, or air-gapped environments.

• Advanced understanding of container build systems, base image strategy, and reproducible builds.

• Proficient knowledge of Kubernetes and Helm packaging.

• Practical experience with vulnerability scanning and provenance tools.

• Capability to differentiate genuine security risks from scanner noise.

• Strong skills in Go and/or Python for automation and updating upstream open-source dependencies.

• Ability to produce clear technical documentation for external auditors and customer security teams.

• Inclination towards eliminating entire categories of issues rather than addressing individual tickets.

🏝️ Benefits

• Opportunities for growth and success.

• A culture focused on teaching and learning.

• Access to the tools necessary for success in the role and the company.

• A diverse and inclusive workplace.