Senior Container Image & Security Engineer - Remote

RapidFort, Inc.; United States; Remote; USD 130,000 - 200,000; Full time

Job summary

RapidFort, Inc. is seeking a hands-on Senior Software Engineer to own the container image lifecycle, including building minimal, hardened images and remediating CVEs across Linux distributions and runtimes. You will automate maintenance, publish images, and ensure compatibility with Kubernetes and diverse stacks.

The role emphasizes Linux engineering, vulnerability remediation, and software automation, with remote work and collaboration across security, infrastructure, and engineering teams.

Qualifications

• 5+ years of experience in software engineering, Linux systems, or SRE roles.
• Strong Linux distribution knowledge (Debian/Ubuntu/Alpine/RHEL).
• Experience building and optimizing Docker images and multi-stage builds.
• Proven CVE remediation experience in Linux packages and container images.

Responsibilities

• Design, build, and maintain minimal, hardened container images across Linux distributions and runtimes.
• Own end-to-end CVE remediation across OS packages, libraries, runtimes, and dependencies.
• Troubleshoot package compatibility, dependencies, and runtime issues while preserving functionality.
• Reduce image size and attack surface by removing unnecessary components.
• Build and improve automated pipelines for image builds, scans, remediation, testing, and publishing.
• Develop tooling for image versioning, dependencies, metadata, and release traceability.
• Generate and maintain SBOMs for supply chain visibility and compliance.
• Validate image functionality and compatibility with Kubernetes and other environments.
• Collaborate with teams to define image hardening standards and integrate workflows.
• Maintain clear developer-facing documentation.

Skills

Linux

Docker

Python

Go

CI/CD

SRE

Tools

Trivy

Grype

Cosign

Sigstore

Kubernetes

Job description

RapidFort, Inc. is seeking a hands-on Senior Software Engineer to own the container image lifecycle, including building minimal, hardened images and remediating CVEs across Linux distributions and runtimes. You will automate maintenance, publish images, and ensure compatibility with Kubernetes and diverse stacks.

The role emphasizes Linux engineering, vulnerability remediation, and software automation, with remote work and collaboration across security, infrastructure, and engineering teams.