Role & responsibilities

- Own and drive hardened base image evaluation and rollout activities, including POC planning, technical validation, and migration support for engineering teams.
- Analyze existing Dockerfiles and container build workflows, then adapt them to hardened or minimal image models, including multi-stage builds, shell-less images, non-root runtime patterns, package dependencies, and custom module handling.
- Partner with engineering teams to onboard representative services and validate hardened images against real application requirements such as NGINX, Go/protoc builds, Java runtime images, Ubuntu-derived workloads, and package-specific constraints.
- Support container registry integration patterns, including GCP Artifact Registry mirroring, pull-through cache models, self-hosted registries, scheduled synchronization.
- Help integrate security tooling into CI/CD workflows to improve vulnerability visibility, image hygiene, SBOM adoption, signing/verification practices, and continuous remediation.




- Coordinate with vendors and internal stakeholders during POCs, technical troubleshooting, architecture reviews, pricing/licensing inputs, support escalations, and rollout planning.
- Contribute to vulnerability management and CNAPP-related initiatives by supporting cloud security tooling, including Wiz-related workflows and integration considerations.
- Collaborate with Compliance/GRC stakeholders to ensure engineering controls and integrations can support SOC2, GovRAMP, Vanta evidence collection, and audit-readiness needs.
- Document technical patterns, migration guidance, implementation decisions, known limitations, and support procedures for engineering adoption.
- Provide practical technical support across global teams, with the ability to collaborate effectively with APAC/India-based engineering resources

Perks and advantages

- Hybrid and Complete remote option

- Health Insurance

📌 Devsecops Engineer (Hyderabad)
🏢 Fournine Cloud Solutions
📍 Hyderabad