Security Platform / DevSecOps Engineer — Container & Cloud Security (5+ years of Exp)
Core
Strengthen container and cloud security, reduce vulnerabilities, and enable secure software delivery at scale by integrating security tooling into CI/CD pipelines and managing hardened base images.
Role type
Senior IC DevSecOps Engineer (Container & Cloud Security)
Builds
Secure container images, hardened base images, and secure CI/CD pipelines for production workloads
Domain
Cloud Security, Container Security, DevSecOps
Required skills
Docker, Kubernetes, CI/CD pipelines, GCP Artifact Registry, container vulnerability scanning, SBOM adoption, image signing/verification, Bash scripting, Python, Go-adjacent tooling, Linux runtime hardening
Preferred skills
Distroless/minimal container images, Wiz, Trivy, Snyk, SOC2/GovRAMP compliance, global team collaboration
Technologies
Docker, Kubernetes, GCP, Skopeo, Wiz, Trivy, Snyk, Grype, Orca, Vanta, NGINX, Go, Java, Ubuntu
Responsibilities
Drive hardened base image evaluations and rollouts; Analyze and optimize Dockerfiles and container build workflows; Integrate security tooling into CI/CD pipelines; Support GCP Artifact Registry integrations; Contribute to CNAPP and vulnerability management initiatives; Create technical documentation and security patterns
Seniority
Senior, hands-on IC