What You Bring

• 5+ years of relevant experience in software engineering, Linux systems engineering, platform engineering, DevSecOps, or SRE.
• Deep understanding of Linux systems, with hands-on experience across distributions such as Debian, Ubuntu, Alpine, or RHEL.
• Strong experience building and optimizing Docker images, including multi-stage builds, image layering, and container filesystem structures.
• Proven experience investigating and remediating CVEs in Linux packages and container images, including patching, rebuilding, and validating fixes.
• Strong working knowledge of Linux package management and dependency resolution using tools such as apt, apk, yum/dnf, or rpm.
• Strong programming or scripting skills in Python, Go, or Bash, with experience building maintainable automation and internal tooling.
• Experience developing and maintaining CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, or similar tools.
• Hands-on experience with vulnerability scanners such as Trivy, Grype, or Clair, along with SBOM generation.
• Solid understanding of Kubernetes concepts, container lifecycles, and image deployment requirements.
• Ability to independently troubleshoot complex technical issues and collaborate effectively across engineering teams.

Nice to Have

• Experience building minimal or distroless images and maintaining a large catalog of container images.
• Experience building Linux packages from source or backporting security fixes.
• Familiarity with SBOM formats and tools such as SPDX, CycloneDX, and Syft.
• Experience with image signing, provenance, and verification using Cosign or Sigstore.
• Knowledge of software supply chain security frameworks such as SLSA.
• Familiarity with container registries such as Docker Hub, Harbor, or Amazon ECR.
• Experience with Helm, Kustomize, GitOps, or infrastructure-as-code workflows.
• Experience in a startup environment or regulated industry.

What Success Looks Like

• Reliable delivery of production-ready, hardened images with near-zero exploitable CVEs.
• Scalable automation for image builds, remediation, validation, and publishing.
• Faster remediation turnaround while maintaining runtime compatibility and image quality.
• Measurable reductions in image size and attack surface.
• Repeatable standards for secure, reproducible container image delivery.

Compensation & Benefits

• Base salary: $130,000–$200,000, depending on experience and technical depth.
• Equity participation.
• Comprehensive health, dental, and vision coverage.
• Remote-first work environment.
• Opportunity to solve complex Linux, container, and software supply chain security challenges.
• Career growth within a rapidly scaling cybersecurity company.