Paranoids Senior Container Security Engineer
Core
Senior engineer securing container workloads across cloud (GCP, AWS) and on-premises environments, focusing on image scanning, policy enforcement, and AI-augmented automation.
Role type
Senior IC container security engineer
Builds
Secure-by-default container baselines, hardened base images, policy-as-code guardrails, and AI-assisted vulnerability triage workflows
Domain
Cloud security + Container security
Deliverable
production ML models
Required skills
Container vulnerability scanning (Grype, Syft, Trivy, Anchore, Snyk), SBOM management (SPDX, CycloneDX), GCP container security (GKE, Cloud Run, Artifact Registry), On-prem host hardening (Linux, Baremetal, Windows, containerd, Docker), Kubernetes security (RBAC, namespaces, pod security), AWS container security (EKS, ECS, Fargate, ECR), Python, SQL, Enterprise AI tools (Claude, Gemini)
Preferred skills
Binary Authorization, Sigstore/cosign, OPA Gatekeeper, Kyverno, Kubernetes network policies, Container runtime security agents, CIS Benchmarks, Infrastructure as Code (Terraform, Checkov), AI-assisted security workflow design
Technologies
GKE, Cloud Run, Artifact Registry, EKS, ECS, Fargate, ECR, containerd, Docker, Kubernetes, OPA Gatekeeper, Kyverno, Terraform, Checkov, Databricks, Spark, Claude, Gemini
Responsibilities
Operate and improve container image scanning and SBOM tooling in CI/CD pipelines; Develop container security baselines and best practices; Build detections to enforce baselines and route findings; Build secure-by-default paved roads and hardened base images; Act as hands-on specialist for GCP and AWS container workloads; Act as hands-on specialist for on-premises host security; Develop and refine AI-assisted workflows for vulnerability triage; Review and validate AI-generated policy changes; Partner with platform and product teams to deliver security milestones; Report on container fleet risk posture and program metrics
Seniority
Senior, hands-on IC
