6 hours ago
Remote, Cyprus +2 moreMid Level
Responsibilities
- Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
- Implement automated vulnerability scanning for Docker images and dependencies.
- Investigate and remediate vulnerabilities in container images.
- Harden Docker images by minimizing attack surfaces and applying security best practices.
- Implement container image signing and verification for software supply chain integrity.
- Automate security checks and enforce policies throughout the CI/CD lifecycle.
- Secure and maintain Kubernetes workloads, configurations, and deployments.
Requirements
- Strong hands-on experience with Docker, container security, and image optimization.
- Practical experience building and maintaining GitLab CI/CD pipelines.
- Hands-on Kubernetes experience covering workload deployment, configuration, and security.
- Solid understanding of Linux security, system hardening, and vulnerability management.
- Experience with container vulnerability scanning tools such as Trivy or Grype.
- Familiarity with container image signing and verification using Cosign or Sigstore.
- Strong Bash or Python scripting skills.
- At least 3 years of experience in DevOps, DevSecOps, or Platform Engineering.
- Knowledge of CI/CD security controls, Kubernetes security practices, software supply chain security, SBOMs, and artifact provenance.
- Experience with hardened container images, Helm, container registries, policy-as-code, Kubernetes security tools, infrastructure as code, SLSA, and automated dependency updates is preferred or advantageous.
Benefits
- Competitive compensation.
- Flexible working hours and hybrid or remote options, depending on the role.
- Work from anywhere in the world for up to 45 days per year.
- Private medical insurance for employees and their families, subject to location.
- Extra paid vacation and sick leave days, subject to location.
- Support for important life moments and celebrations.
- Language courses.
- Modern offices with snacks, drinks, and entertainment, subject to location.
- Team sports and social activities, subject to location.
- This position is available only under an employment (labor) agreement.
Tech Stack
About Gcore
Gcore provides edge and cloud infrastructure for enterprises and service providers, including CDN, DNS, traffic management, security, and GPU cloud for AI workloads. It operates its own global network across six continents to deliver low-latency performance for media, gaming, and enterprise applications. Founded in 2014 and headquartered in Contern, Luxembourg, Gcore is privately held.