Senior Software Engineer — Container Images & Security
New
J
JobgetherContainer security
Based in the United StatesFull-TimeSenior
SalaryBase salary: $130,000–$200,000 USD, depending on experience and technical expertise.
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 5 years of relevant professional experience
- Required Skills
- DockerPythonBashGoCI/CDLinux
Requirements
- Have at least 5 years of relevant professional experience in software engineering, Linux systems engineering, platform engineering, DevSecOps, or Site Reliability Engineering.
- Bring deep knowledge of Linux systems and hands-on experience with distributions such as Debian, Ubuntu, Alpine, or RHEL.
- Have strong experience building and optimizing Docker images, including multi-stage builds, image layering, and container filesystem structures.
- Demonstrate expertise investigating and remediating CVEs in Linux packages and container images, including patching, rebuilding, and validating fixes.
- Understand Linux package management and dependency resolution using tools such as apt, apk, yum/dnf, or rpm.
- Be proficient in Python, Go, or Bash and have experience developing maintainable automation and internal engineering tools.
- Have experience building and maintaining CI/CD pipelines with GitHub Actions, GitLab CI, Jenkins, or comparable platforms.
- Have practical experience with vulnerability scanning tools such as Trivy, Grype, or Clair, and with SBOM generation.
- Understand Kubernetes concepts, container lifecycles, and container image deployment requirements.
- Be able to troubleshoot independently and collaborate across technical teams.
- Experience creating minimal or distroless images, building Linux packages from source, or backporting security fixes is preferred.
- Familiarity with SPDX, CycloneDX, Syft, Cosign or Sigstore, SLSA, container registries, Helm, Kustomize, GitOps, or infrastructure-as-code workflows is preferred.
Responsibilities
- Design, build, and maintain minimal, hardened, production-ready container images across Linux distributions and application runtimes.
- Investigate, patch, rebuild, and validate fixes for vulnerabilities in operating system packages, libraries, runtimes, and dependencies.
- Troubleshoot package compatibility, dependency resolution, build, and runtime issues while maintaining application functionality.
- Reduce image size and attack surface by removing unnecessary packages, binaries, and dependencies.
- Develop and optimize automated pipelines for image building, vulnerability scanning, remediation, testing, and publishing.
- Create internal tools and automation for image versioning, dependency updates, metadata, and release traceability.
- Generate, validate, and maintain Software Bills of Materials (SBOMs).
- Validate image functionality, reproducibility, and compatibility with Kubernetes and other containerized environments.
- Collaborate with platform, infrastructure, and security teams to establish image-hardening standards and integrate curated images into workflows.
- Document secure container images and improve remediation speed, image quality, build reliability, and operational efficiency.
View Full Description & ApplyYou'll be redirected to the employer's site
