Role & responsibilities
Own and drive hardened base image evaluation and rollout activities, including POC planning, technical validation, and migration support for engineering teams.
Analyze existing Dockerfiles and container build workflows, then adapt them to hardened or minimal image models, including multi-stage builds, shell-less images, non-root runtime patterns, package dependencies, and custom module handling.
Partner with engineering teams to onboard representative services and validate hardened images against real application requirements such as NGINX, Go/protoc builds, Java runtime images, Ubuntu-derived workloads, and package-specific constraints.
Support container registry integration patterns, including GCP Artifact Registry mirroring, pull-through cache models, self-hosted registries, scheduled synchronization.
Help integrate security tooling into CI/CD workflows to improve vulnerability visibility, image hygiene, SBOM adoption, signing/verification practices, and continuous remediation.




Coordinate with vendors and internal stakeholders during POCs, technical troubleshooting, architecture reviews, pricing/licensing inputs, support escalations, and rollout planning.
Contribute to vulnerability management and CNAPP-related initiatives by supporting cloud security tooling, including Wiz-related workflows and integration considerations.
Collaborate with Compliance/GRC stakeholders to ensure engineering controls and integrations can support SOC2, GovRAMP, Vanta evidence collection, and audit-readiness needs.
Document technical patterns, migration guidance, implementation decisions, known limitations, and support procedures for engineering adoption.
Provide practical technical support across global teams, with the ability to collaborate effectively with APAC/India-based engineering resources

Perks and advantages
Hybrid and Complete remote option
Health Insurance

📌 Devsecops Engineer Hyderabad
🏢 Fournine Cloud Solutions
📍 Hyderabad