Staff Software Engineer, Image Build & Release

The role

You will be the technical anchor for the Image Build & Release team, setting technical direction for the build pipeline, image signing, and OTA delivery infrastructure. You will write code, produce architecture designs, and mentor engineers to improve automation and delivery velocity for NodeZero.

What you will do

• Design and own the CI/CD pipeline that produces NodeZero container images
• Define image hardening, CVE scanning, and signing strategy
• Partner with the OTA Services team to design the delivery mechanism for image updates
• Set standards for build reproducibility, artifact versioning, and release gating
• Mentor P4 engineers through code review, design review, and architectural pairing
• Own the build and release infrastructure end-to-end
• On-call for pipeline failures, build time regressions, and delivery incidents

Required qualifications

• 8+ years of professional software engineering experience
• Deep specialization in build systems, CI/CD, or release engineering for containerized applications
• Expert-level knowledge of Docker and container image construction
• Experience with container image signing and verification (Cosign, Notary, or equivalent)
• Experience with image scanning toolchains (Trivy, Grype, Snyk, or equivalent)
• Track record building and operating CI/CD pipelines at scale (GitHub Actions, GitLab CI, Tekton, or equivalent)
• Deep understanding of Kubernetes
• Experience designing and operating OTA or remote update systems
• Proficiency in Go, Python, or shell scripting
• Experience with artifact registries (ECR, GCR, Docker Hub, Harbor)
• Track record of setting engineering standards
• Ability to produce clear architecture documents and drive technical decisions

Nice to have

• Experience with secure software supply chain practices (SLSA, SBOM generation, provenance attestation)
• Background in cybersecurity or building software that runs in sensitive customer environments
• Experience with Helm chart packaging and Kubernetes operator patterns
• Familiarity with eBPF or kernel-level tooling

Benefits

• Health, vision & dental care for you and your family
• Flexible vacation policy
• Generous parental leave
• Remote work

Before you apply

• Minimum 25Mbps consumer grade broadband connection required

About the company

Horizon3 is a fast-growing, remote cybersecurity company dedicated to enabling organizations to proactively find, fix and verify exploitable attack vectors. Their flagship product is the NodeZero platform.