As a Senior DevSecOps Engineer on our Design Maintenance team, you will lead the ongoing maintenance and evolution of our existing CleanStart container image designs. You will update image specifications to address recent security vulnerabilities, improve performance, and ensure compatibility with evolving software ecosystems. Your expertise will be crucial in maintaining our zero-vulnerability standard across our container image portfolio.
Responsibilities
Lead the maintenance and updating of existing container image designs
Design security updates and patches for container images in response to current vulnerabilities
Develop strategies for maintaining zero-vulnerability status in existing images
Create specification updates for OS and package upgrades
Design processes for validating security and functionality of updated images
Collaborate with security researchers to address emerging vulnerabilities
Optimize container image designs for performance and compatibility
Mentor junior engineers on maintenance best practices
Create and improve design standards for image maintenance
Work with Build teams to ensure smooth implementation of design updates
Required Qualifications
5+ years of experience in DevOps, infrastructure as code, or security engineering
Strong understanding of container technologies and image lifecycle management
Experience with software maintenance and update strategies
Deep knowledge of Linux systems and package management
Understanding of vulnerability management and patching processes
Proficiency in scripting languages (Bash, Python, Go, etc.)
Experience with CI/CD pipelines and automation
Solid problem-solving and analytical skills
Excellent communication and collaboration abilities
Preferred Qualifications
Experience with container image maintenance in production environments
Knowledge of software supply chain security concepts
Familiarity with vulnerability databases and security advisories
Experience with minimalist container design principles
Background in security engineering or secure operations
Understanding of semantic versioning and compatibility management
Experience with automated testing and validation
Knowledge of compliance frameworks and requirements
Disclaimer: This job posting and location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.