Senior Software Engineer, Patch Engineering & Vulnerability Remediation
Owns secure container image pipelines and automates vulnerability remediation for regulated, on-premises, and air-gapped deployments. The role requires deep container expertise, Kubernetes and Helm knowledge, Go or Python automation skills, and strong technical writing for auditors and customer security teams.
About the job
Responsibilities
- Own the hardened image pipeline for demanding deployments.
- Reduce time to remediate critical and high-severity findings to a published, defensible SLA.
- Build an automated path from vulnerability scan to fix, including SBOM and exploitability statements generated on every release.
- Document evidence-based decisions when vulnerabilities are not fixed.
- Set the technical direction and tooling for the team.
Requirements
- Experience shipping and maintaining software or container images in regulated, on-premises, or air-gapped environments where redeployment is not always possible.
- Deep knowledge of container build systems, base image strategy, and reproducible builds.
- Working knowledge of Kubernetes and Helm packaging.
- Hands-on experience with vulnerability scanning and provenance tooling.
- Ability to distinguish genuine security risks from scanner noise.
- Strong Go and/or Python skills for building automation and patching upstream open-source dependencies.
- Clear technical writing for external auditors and customer security teams.
- A bias toward eliminating whole classes of problems rather than merely closing tickets.
Benefits and Values
- Growth mindset and a focus on continuous improvement.
- Teaching and learning environment with tools for success.
- Commitment to building a diverse and inclusive team.
Skills
Container Builds, Base Images, Reproducible Builds, Kubernetes, Helm, Vulnerability Scanning, Provenance Tooling, Software Bill Of Materials, Go, Python, Open-Source Dependencies, Air-Gapped Environments
Similar jobs
Security Engineering jobs
Monarch
Remote
Own and scale security governance, risk, compliance, and customer assurance programs, including audits, controls monitoring, third-party risk, policies, and security questionnaires. The role requires 3–5 years of security GRC experience and hands-on understanding of IAM, endpoint, and cloud controls.
Vanta
Remote
Leads interpretation and productization of federal compliance controls for Vanta’s public-sector platform, translating FedRAMP and related frameworks into technically testable guidance, automated detectors, mappings, and machine-readable authorization workflows. Requires 8–10+ years of hands-on federal compliance experience, especially FedRAMP program and SSP work.
Supabase
Remote
Secures Supabase’s cloud platform, Kubernetes environments, containers, and infrastructure by conducting risk assessments, strengthening controls, and building scalable security guardrails. Requires senior-level platform or cloud security experience with deep AWS, Kubernetes, container, and Linux expertise.
Retell AI
United StatesBuild and automate technical security controls, compliance workflows, and audit evidence for enterprise readiness. The role requires strong scripting or programming skills, security fundamentals, and the ability to collaborate across engineering, security, legal, and customer-facing teams.
Vanta
Remote
Leads a global Security Operations team, setting detection, response, and security strategy while driving incident response and risk remediation. The role requires strong SaaS and cloud security experience, leadership ability, familiarity with major security standards, and responsible use of AI.