Senior Software Engineer — Container Images & Security
RapidFort, Inc.14 days ago
Remote, United StatesSenior
Base Salary
$130k - $200k/yr
Responsibilities
- Design, build, and maintain minimal, hardened container images across Linux distributions and application runtimes.
- Own end-to-end CVE remediation, including analysis, patching, rebuilding, and validation.
- Troubleshoot package, dependency, build, runtime, and compatibility issues while preserving application functionality.
- Build automation for image builds, vulnerability scanning, remediation, testing, publishing, versioning, and dependency updates.
- Generate, validate, and maintain SBOMs and release metadata for software supply chain visibility and compliance.
- Validate image functionality, reproducibility, and compatibility with Kubernetes and other containerized environments.
- Collaborate with platform, infrastructure, and security teams to define hardening standards and integrate curated images into development and deployment workflows.
- Document curated image usage and continuously improve remediation speed, image quality, build reliability, and operational efficiency.
Requirements
- 5+ years of relevant experience in software engineering, Linux systems engineering, platform engineering, DevSecOps, or SRE.
- Deep hands-on understanding of Linux, including distributions such as Debian, Ubuntu, Alpine, or RHEL.
- Strong experience building and optimizing Docker images, including multi-stage builds, image layering, and container filesystem structures.
- Experience investigating and remediating CVEs in Linux packages and container images through patching, rebuilding, and validation.
- Strong knowledge of Linux package management and dependency resolution using apt, apk, yum/dnf, or rpm.
- Strong programming or scripting skills in Python, Go, or Bash, including maintainable automation and internal tooling.
- Experience developing and maintaining CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, or similar tools.
- Hands-on experience with vulnerability scanners such as Trivy, Grype, or Clair and with SBOM generation.
- Solid understanding of Kubernetes concepts, container lifecycles, and image deployment requirements.
- Experience with minimal or distroless images, large image catalogs, Linux package building or security backporting, SBOM formats, image signing and provenance, container registries, or regulated environments is preferred.
- U.S. citizenship is required because the position supports federal government customers.
Benefits
- Remote-first work environment.
- Full-time employment.
- Equity participation.
- Comprehensive health, dental, and vision coverage.
- Career growth within a rapidly scaling cybersecurity company.
- Opportunity to solve complex Linux, container, and software supply chain security challenges.
About RapidFort, Inc.
RapidFort builds a SaaS platform for securing containerized applications and the software supply chain, offering curated near‑zero CVE images, SBOM/RBOM generation, and runtime hardening to reduce attack surface. It serves enterprises and U.S. public‑sector customers, including defense work that requires U.S. citizenship for some roles. Founded in 2020 and headquartered in Sunnyvale, California, the company is privately held.