Senior Software Engineer — Container Images & Security

Own the lifecycle of secure, production-ready container images, from building lean images to remediating vulnerabilities and validating application compatibility. You’ll combine Linux systems engineering, security work, and automation, partnering with platform and security teams to make image delivery repeatable across distributions and runtimes. This is a remote full-time role requiring U.S. citizenship because of work supporting federal customers.

• Build and maintain hardened images for Linux distributions and application runtimes, reducing unnecessary packages and attack surface.
• Investigate vulnerabilities in operating system packages, libraries, and runtimes; apply fixes, rebuild images, and verify functionality.
• Diagnose dependency, build, and runtime compatibility problems while preserving application behavior.
• Automate image building, scanning, testing, remediation, versioning, and publishing; maintain release metadata and traceability.
• Generate and maintain software bills of materials, and validate image reproducibility and Kubernetes compatibility.
• Document image use and work with engineering teams to set hardening standards and improve delivery quality.

• At least 5 years of relevant software, Linux, platform, Dev Sec Ops , or reliability engineering experience.
• Strong Linux knowledge across distributions such as Debian, Ubuntu, Alpine, or RHEL, and familiarity with package managers such as apt, apk, yum/dnf, or rpm.
• Experience optimizing Docker images, including multi-stage builds, layers, and container file systems.
• Demonstrated ability to investigate and remediate CVEs in packages and images, then validate fixes.
• Programming or scripting skills in Python, Go, or Bash, plus experience maintaining CI/CD pipelines.
• Hands-on use of vulnerability scanners and SBOM generation, and a solid grasp of Kubernetes and container life cycles.

• Experience with distroless images, building Linux packages from source, or backporting security fixes.
• Familiarity with SPDX, CycloneDX, Syft, image signing and provenance tools, or SLSA.
• Exposure to container registries, Helm, Kustomize, Git Ops, or infrastructure-as-code.

Remote-first work, equity participation, and health, dental, and vision coverage are listed.

The stated base salary range is $130,000–$200,000, depending on experience and technical depth.