# Senior Supply Chain Security Engineer

**Company:** [Docker](https://hotfix.jobs/companies/docker)
**Location:** Remote
**Role:** Security Engineering
**Experience:** 6+ years
**Skills:** Kubernetes, Helm, Yaml, Go, Docker, Container Security, Linux, GitHub, Sigstore, Sbom, Slsa, Grafana, Kyverno, Istio, Cert-Manager
**Posted:** 2026-05-12

> Maintains security-hardened container images and adapts upstream Helm charts for Kubernetes environments, with a focus on supply-chain security, CVE triage, testing, and package-maintainer practices. Requires 6+ years of backend engineering experience and strong container, Kubernetes, YAML, and security expertise.

## Job Description

## Responsibilities
- Author and maintain image definition files that track upstream open-source project releases, define build steps, and keep the catalogue current across dozens of images.
- Adapt upstream Helm charts, including cert-manager, Grafana, MongoDB, and Kyverno, to work with Docker Hardened Images, handling security constraints, non-root contexts, and Kubernetes compatibility concerns.
- Track upstream version releases and semantic-versioning patterns across monorepos and standard repositories, including major-version breaks and dependency chains.
- Write Go-based integration tests that validate images and charts in real Kubernetes environments.
- Triage CVEs and contribute to security-hardening decisions across images.
- Review peer definitions and chart pull requests against established conventions and identify issues before they reach customers.
- Participate in an on-call rotation outside standard business hours, including evenings, weekends, and holidays, as needed.

## Requirements
- 6+ years of backend engineering experience with production-grade systems.
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
- Strong familiarity with containers and Kubernetes, including cert-manager, Kyverno, Grafana, and Istio; experience deploying these systems and reading upstream Helm chart source.
- Comfort using YAML as a primary working medium.
- Understanding of container security fundamentals, including non-root users, UID/GID, image layers, multi-architecture builds, and software supply-chain concepts.
- Some Go experience sufficient to read and write test code.
- A maintainer mindset focused on consistency, pattern adherence, and downstream impact.
- Familiarity with GitHub-based open-source workflows, including pull requests, upstream tracking, and monorepo conventions.

## Nice to have
- Experience maintaining packages for a Linux distribution, Homebrew, or a similar ecosystem.
- Helm chart authorship or contribution experience.
- Familiarity with supply-chain tooling such as Sigstore, SBOMs, and SLSA.
- Experience in a regulated or security-conscious environment.

## Compensation and benefits
- Canada: CA$210,627–CA$341,690 plus equity.
- United States: $154,600–$250,800 plus equity.
- EU: €83,900–€139,700 plus equity.
- Flexible remote work.
- Quarterly Whaleness Days and an end-of-year Whaleness break.
- Home-office setup support.
- 16 weeks of paid parental leave after 6 months of employment.
- Technology stipend equivalent to $100 USD net per month.
- PTO plan.
- Training stipend for conferences, courses, and classes.
- Equity participation.
- Medical benefits, retirement benefits, and holidays vary by country.

## Similar jobs

- [SOC Lead](https://hotfix.jobs/jobs/1b4ce51d-67b7-4000-a328-a6f0e74f22a6) - Idme - McLean, VA - $96k – $112k/yr
- [Senior Security Engineer](https://hotfix.jobs/jobs/9286e91d-ca35-4449-bb47-da0dc51b2aaa) - ConductorOne - Remote - $100k – $200k/yr
- [Security GRC Lead](https://hotfix.jobs/jobs/2eb261b0-5ff9-435d-b0fb-eaf5933051d1) - Mercor - San Francisco, CA - $350k – $425k/yr
- [Lead, Security Controls Assurance - SOX](https://hotfix.jobs/jobs/a1c11627-c920-4e31-abc6-2e170042a626) - Anthropic - San Francisco, CA - $410k – $510k/yr
- [Senior Platform Security Engineer](https://hotfix.jobs/jobs/3ac667bf-62fa-4280-8ccb-2af3468d8579) - Discord - $196k – $245k/yr

**Apply:** https://hotfix.jobs/jobs/e9f66f42-8028-418e-b92e-0369680d2ee5
**Canonical:** https://hotfix.jobs/jobs/e9f66f42-8028-418e-b92e-0369680d2ee5