Senior Container Security Engineer

The role

You will lead vulnerability remediation and image hardening across Linux-based container environments. You will analyze, rebuild, and optimize container images while building automated remediation pipelines.

What you will do

• Own end-to-end CVE remediation across Linux-based container images.
• Analyze vulnerabilities across OS packages, libraries, runtimes, and dependencies.
• Patch, rebuild, validate, and maintain hardened container images at scale.
• Reduce attack surface by removing unnecessary packages, binaries, services, and dependencies.
• Build and scale automated remediation pipelines for continuous image patching.
• Improve image security posture while minimizing operational disruption.
• Generate, validate, and maintain SBOMs to support supply chain visibility and compliance.
• Integrate remediation workflows into CI/CD and GitOps pipelines.
• Optimize image size, startup performance, and operational efficiency.
• Research emerging Linux, container, Kubernetes, and software supply chain threats.

Required qualifications

• 5+ years of experience in Linux systems engineering, platform engineering, DevSecOps, security engineering, or SRE.
• Deep understanding of Linux distributions (Debian, Ubuntu, Alpine, RHEL).
• Strong hands-on experience with Docker, Kubernetes, and containerized environments.
• Proven experience remediating CVEs within Linux packages and container ecosystems.
• Proficiency with package management systems (apt, yum/dnf, apk, rpm).
• Experience with scanning tools such as Trivy, Grype, or Clair.
• Strong scripting or programming skills in Python, Bash, or Go.
• Solid understanding of container image layering and filesystem structures.
• Familiarity with CI/CD automation and infrastructure-as-code workflows.
• Experience with cloud-native infrastructure (AWS, Azure, or GCP).

Nice to have

• Experience building minimal or distroless container images.
• Familiarity with SBOM standards (SPDX, CycloneDX, Syft).
• Experience with image signing and verification tools (Cosign, Sigstore).
• Knowledge of software supply chain security frameworks like SLSA.
• Familiarity with Kubernetes security controls and eBPF.

Benefits

• Equity participation
• Comprehensive health, dental, and vision coverage
• Remote-first work environment
• Opportunity to work on cutting-edge cloud-native and container security technologies
• Career growth within a rapidly scaling cybersecurity company

About the company

rapidfortinc is a rapidly scaling cybersecurity company.