Staff Software Engineer, Image Build & Release
Horizon3 AI4 hours ago
Remote, United StatesStaff+
Base Salary
$230k - $260k/yr
Responsibilities
- Design and own the pipeline that builds NodeZero container images from source through signed and scanned distribution artifacts.
- Define image hardening, CVE scanning, signing, and verification strategies for security and compliance.
- Design OTA delivery infrastructure with rollout, rollback, version-pinning, and reliable update capabilities.
- Set standards for build reproducibility, artifact versioning, release gating, and release engineering across the Client Platform team.
- Write code, create architecture documents, drive technical decisions, and mentor P4 engineers through design and code review.
- Own build and release infrastructure operationally, including pipeline failures, build-time regressions, and delivery incidents.
Requirements
- 8+ years of professional software engineering experience with deep specialization in build systems, CI/CD, or release engineering for containerized applications.
- Expert knowledge of Docker and container image construction, including multi-stage builds, base image selection, layer optimization, and image hardening.
- Experience with container image signing and verification using Cosign, Notary, or an equivalent, and image scanning using Trivy, Grype, Snyk, or an equivalent.
- A strong track record building and operating CI/CD pipelines at scale with GitHub Actions, GitLab CI, Tekton, or an equivalent.
- Deep understanding of Kubernetes image pulling, versioning, and updates in running clusters.
- Experience designing and operating OTA or remote update systems, including rollout strategies, delta delivery, version negotiation, and rollback.
- Proficiency in Go, Python, or shell scripting sufficient to build and maintain pipeline tooling.
- Experience with artifact registries such as ECR, GCR, Docker Hub, or Harbor and with artifact lifecycle management.
- Experience setting engineering standards, producing architecture documents, driving technical decisions across team boundaries, and mentoring mid-level engineers.
- Preferred qualifications include secure software supply chain practices such as SLSA, SBOM generation, and provenance attestation; cybersecurity or sensitive-environment experience; Helm chart packaging; Kubernetes operator patterns; and eBPF or kernel-level tooling.
Benefits
- Fully remote work at a 100% remote company with a minimum 25Mbps consumer-grade broadband connection required.
- The role may require up to 5% travel.
- Health, vision, and dental care for employees and their families.
- Flexible vacation policy and generous parental leave.
- Growth and career development opportunities in an inclusive, collaborative environment.
- Additional equity compensation in the form of stock options may be available.
Tech Stack
Categories
About Horizon3 AI
Horizon3 AI builds NodeZero, a proactive security platform that autonomously performs penetration testing and validates attack paths across on‑prem, cloud, and hybrid environments. The company sells its software by subscription to security and IT teams at enterprises and government agencies, helping prioritize and verify fixes. Founded in 2019 and headquartered in San Francisco, it is privately held and serves customers across regulated industries and the public sector.