Senior Software Engineer — Container Images & Security

Jobgether; Oregon; Hybrid; USD 130,000 - 200,000; Full time

Benefits offered by this job

Equity participation

Remote-first environment

Career development opportunities

Job summary

Jobgether seeks a Senior Software Engineer focused on container images and security in the United States. You will own the full image lifecycle, design minimal images, remediate CVEs, and automate pipelines across Linux distributions and runtimes.

You will collaborate with security and platform teams to raise the bar on software supply chain security. Experience with tracing vulnerabilities, SBOMs, and Kubernetes is essential.

Qualifications

• 5+ years in software/DevSecOps or SRE with Linux focus.
• Hands-on with Debian/Ubuntu/Alpine/RHEL systems.
• Proven ability to build and optimize Docker images and multi-stage builds.
• Experience patching and validating fixes for Linux CVEs and SBOMs.

Responsibilities

• Design and maintain minimal, hardened container images for multiple runtimes.
• Own end-to-end vulnerability remediation across OS packages and images.
• Automate image pipelines for building, scanning, remediation, testing and publishing.
• Generate SBOMs and ensure supply chain visibility.
• Collaborate with platform, infra, and security teams to enforce image hardening.

Skills

Linux systems engineering

Docker image building

CVEs remediation

Python/Go/Bash scripting

CI/CD pipelines

Vulnerability scanning

Kubernetes

SBOM generation

Tools

Trivy

Grype

Clair

Cosign/Sigstore

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Software Engineer — Container Images & Security based in the United States.

The Senior Software Engineer will join an engineering team focused on building, securing, and maintaining production-ready container images at scale. This hands‑on role combines advanced Linux systems engineering, vulnerability remediation, and software automation to strengthen the security and reliability of containerized applications. The successful candidate will take ownership of the complete container image lifecycle, from designing minimal and reproducible images to identifying vulnerabilities, implementing fixes, and validating runtime compatibility. Working across multiple Linux distributions and application ecosystems, the engineer will collaborate with infrastructure, platform, and security specialists to improve software supply chain security. This is an opportunity to solve complex technical challenges, develop scalable engineering solutions, and make a measurable impact on the security of modern software environments.

Accountabilities

• Design, build, and maintain minimal, hardened, and production‑ready container images across multiple Linux distributions and application runtimes.
• Own end‑to‑end vulnerability remediation across operating system packages, libraries, runtimes, and dependencies, including investigation, patching, rebuilding, and validation.
• Troubleshoot complex package compatibility, dependency resolution, build, and runtime issues while ensuring applications remain functional.
• Reduce container image size and attack surface by removing unnecessary packages, binaries, and dependencies.
• Develop, maintain, and optimize automated pipelines for image building, vulnerability scanning, remediation, testing, and publishing.
• Create internal tools and automation to manage image versioning, dependency updates, metadata, and release traceability.
• Generate, validate, and maintain Software Bills of Materials (SBOMs) to improve software supply chain visibility and support compliance requirements.
• Validate image functionality, reproducibility, and compatibility with Kubernetes and other containerized environments.
• Collaborate with platform, infrastructure, and security teams to establish image‑hardening standards and integrate curated images into development and deployment workflows.
• Produce clear technical documentation to support developer adoption and consistent use of secure container images.
• Continuously improve remediation speed, image quality, build reliability, and operational efficiency.
• Contribute to measurable improvements in image security, including reducing exploitable vulnerabilities and strengthening reproducible delivery practices.

Requirements

• At least 5 years of relevant professional experience in software engineering, Linux systems engineering, platform engineering, DevSecOps, or Site Reliability Engineering (SRE).
• Deep knowledge of Linux systems, with hands‑on experience using distributions such as Debian, Ubuntu, Alpine, or RHEL.
• Strong experience building and optimizing Docker images, including multi‑stage builds, image layering, and container filesystem structures.
• Demonstrated expertise investigating and remediating Common Vulnerabilities and Exposures (CVEs) in Linux packages and container images, including patching, rebuilding, and validating fixes.
• Strong understanding of Linux package management and dependency resolution using tools such as apt, apk, yum/dnf, or rpm.
• Proficiency in Python, Go, or Bash, with experience developing maintainable automation and internal engineering tools.
• Experience building and maintaining CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, or comparable platforms.
• Practical experience with vulnerability scanning tools such as Trivy, Grype, or Clair, as well as SBOM generation.
• Solid understanding of Kubernetes concepts, container lifecycles, and container image deployment requirements.
• Strong independent troubleshooting and problem‑solving skills, combined with the ability to collaborate effectively across technical teams.
• U.S. citizenship is required due to the role's support of federal government customers.

Preferred Qualifications

• Experience creating minimal or distroless container images and maintaining large container image catalogs.
• Knowledge of building Linux packages from source and backporting security fixes.
• Familiarity with SBOM formats and tools such as SPDX, CycloneDX, and Syft.
• Experience with container image signing, provenance, and verification using Cosign or Sigstore.
• Understanding of software supply chain security frameworks such as SLSA.
• Familiarity with container registries such as Docker Hub, Harbor, or Amazon ECR.
• Experience with Helm, Kustomize, GitOps, or infrastructure‑as‑code workflows.
• Previous experience in a startup environment or regulated industry.

Benefits

• Base salary: $130,000–$200,000 USD, depending on experience and technical expertise.
• Equity participation.
• Comprehensive health, dental, and vision coverage.
• Remote‑first working environment within the United States.
• Full‑time employment opportunity.
• Opportunity to work on complex challenges involving Linux engineering, container security, and software supply chain protection.
• Career development opportunities within a growing cybersecurity organization.