Senior Software Engineer, Patch Engineering & Vulnerability Remediation

Domino Data Lab; Argentina; Presencial; ARS 119.095.000 - 208.417.000; Jornada completa

Descripción de la vacante

Domino Data Lab is building the Release Engineering & Vulnerability Remediation team to deliver hardened, auditable software for regulated environments. You will own the image pipeline for top deployments and automate vulnerability remediation, producing SBOMs and provenance artifacts for every release.

Join a team that defines the tooling, writes runbooks, and keeps pace with security requirements across federal agencies, financial institutions, and healthcare orgs.

Formación

• Experience shipping software or container images into regulated, air‑gapped environments.
• Fluency with container build systems and base image strategies; know reproducible builds.
• Working knowledge of Kubernetes and Helm packaging.
• Hands‑on with vulnerability scanning and provenance tooling.
• Go and/or Python for automation and patching dependencies when fixes are unavailable.
• Clear technical writing for auditors and security teams.

Responsabilidades

• Own the hardened image pipeline for demanding deployments and meet defensible SLAs.
• Automate scan‑to‑fix paths, including SBOM and exploitability statements in releases.
• Provide engineering evidence to support security communications with customers.
• Set technical direction and tooling for future team work.

Conocimientos

Container builds

Kubernetes

Helm packaging

Vulnerability scanning

Go

Python

Technical writing

Regulated deployments

Herramientas

Kubernetes

Helm

SBOM tooling

Descripción del empleo

Who We Are

Domino Data Lab powers model-driven businesses with its leading Enterprise AI platform trusted by over 20% of the Fortune 100. Domino accelerates the development and deployment of data science work while increasing collaboration and governance. With Domino, enterprises worldwide can develop better medicines, grow more productive crops, build better cars, and much more. Founded in 2013, Domino is backed by Coatue Management, Great Hill Partners, Highland Capital, Sequoia Capital and other leading investors. For more information, visit www.domino.ai

Who We Are

Domino Data Lab powers model-driven businesses with its leading Enterprise AI platform trusted by over 20% of the Fortune 100. Domino accelerates the development and deployment of data science work while increasing collaboration and governance. With Domino, enterprises worldwide can develop better medicines, grow more productive crops, build better cars, and much more. Founded in 2013, Domino is backed by Coatue Management, Great Hill Partners, Highland Capital, Sequoia Capital and other leading investors. For more information, visit www.domino.ai

What We Are Building

The Release Engineering & Vulnerability Remediation team is building the infrastructure and automation that lets Domino ship hardened, auditable software to our most security-sensitive customers—federal agencies, financial institutions, and healthcare organizations operating in regulated or air-gapped environments.

Concretely, We Are Building

• A hardened release pipeline that produces container images meeting strict scan thresholds, with reproducible builds and minimal attack surface
• An automated vulnerability triage system that ingests scanner output, deduplicates findings across images and releases, routes to owners, and tracks SLA compliance—without manual triage
• Provenance and exploitability tooling that generates SBOMs and VEX statements on every release, so customer security questions are answered from standing artifacts rather than one-off investigations
• A scalable remediation practice that uses AI and automation to keep pace with the volume of findings, rather than throwing engineers at each CVE individually

This is foundational work. The tooling and runbooks you build will define how Domino operates in regulated markets for years to come.

What Your Impact Will Be

In your first year, you will

• own the hardened image pipeline for our most demanding deployments and cut time‑to‑remediate for critical and high findings to a published, defensible SLA.
• replace one-off vulnerability firefighting with an automated path from scan to fix, including SBOM and exploitability statements generated on every release.
• make "we are not fixing this, and here is why" a documented engineering position backed by evidence, rather than a conversation repeated with every customer.
• set the technical direction and tooling that the next engineers on this team build on.

What We Look For In This Role

• Experience shipping and maintaining software or container images into regulated, on‑premises, or air‑gapped environments where you cannot simply redeploy to fix a problem
• Deep fluency with container build systems, base image strategy, and reproducible builds, plus working knowledge of Kubernetes and Helm packaging
• Hands‑on experience with vulnerability scanning and provenance tooling, and the judgment to distinguish a real risk from scanner noise
• Go and/or Python strong enough to build automation and to patch upstream open‑source dependencies when no fix exists
• Clear technical writing. You will produce evidence that external auditors and customer security teams read and act on
• A bias toward removing whole classes of problems rather than closing tickets

What We Value

• We value a growth mindset. High‑performing creative individuals who dig into problems and see the opportunities for success
• We believe in individuals who seek truth and speak the truth and can be their whole selves at work
• We value all of you that believe improving is always possible At Domino Everything is a work in progress – we can do better at everything
• We emphasize an environment of teaching and learning to equip employees with the tools needed to be successful in their function and the company
• We strongly believe in the value of growing a diverse team and encourage people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply