- Where
- IN · Remote · Remote
- Level
- Mid
If you have spent time making container builds genuinely defensible, not just passing a scanner, this role is for you. You will own the security of our container, Kubernetes, CI/CD and GCP footprint, and the controls you build become the evidence for SOC 2 and GovRAMP readiness.
Responsibilities
Harden our container and Kubernetes footprint end to end: minimal base images, signed artifacts, and a supply chain that holds up to scrutiny.
Secure CI/CD and our GCP environment, including Artifact Registry.
Run vulnerability management and SBOM generation with tools like Wiz, Trivy, Grype and Snyk.
Work alongside engineering on SOC 2 and GovRAMP readiness, where the controls you build become the evidence.
Requirements
5+ years of experience.
Deep hands-on Docker and Kubernetes, plus Linux and container hardening.
CI/CD pipeline security and secure software delivery.
Vulnerability scanning, SBOM, image signing and supply-chain security.
GCP, particularly Artifact Registry.
Scripting in Bash, Python or Go.
Comfort working across Security, DevOps, SRE and Engineering.
Nice to have
Compliance experience (SOC 2, GovRAMP). A plus, not a prerequisite: we would rather have someone who understands the systems and can learn the frameworks.