Job highlights

- 5+ years experience with expert-level Docker and container security, software development in Java/.NET/Python, and CI/CD toolchain proficiency

- Ensure security and compliance of Docker images, remediate vulnerabilities, maintain image catalog, support developers, and collaborate globally within Agile DevOps teams

Job Summary The Container security remediation officer (docker) is a software developer specialized and dedicated to the security management and integrity of the Docker image ecosystem. Your primary objective is to ensure the production readiness, maintainability, and security compliance of all functional, technical, and editor provided Docker images. Acting as a critical technical link, you will work closely with developers globally to reach the security standards expected by the BNP Paribas Group.

You will serve as an extended member of the Corporate Cloud DevOps COE, participating in agile rituals and providing the technical expertise necessary to deliver fresh, supported, and secure images that meet evolving business and security needs.

Responsibilities

- Image Hardening &
- Maintece: Create, update, and ensure the security of technical, functional, and editor Docker images.

- Vulnerability Remediation: Proactively identify vulnerabilities and perform the technical "fixes" (updating base images, patching dependencies, and refactoring Dockerfiles) to ensure security compliance.

- Continuous Improvement: Apply developer best practices (e.g., SOLID, Craft) to ensure images are not only secure but also maintainable and scalable.

- Validation &

- Deployment: Upon delegation, update image references and trigger CI/CD toolchains to validate the technical behavior and security integrity of new images.

- Activity Tracking: Organize and track all assigned activities, providing weekly feedback and local KPI production to the Cloud DevOps COE team.

- Catalog Management: Maintain and regularly update the list of all available images (at least bi monthly) and communicate changes to developer teams.





- Proactive Alerting: Actively monitor and alert development teams regarding the use of obsolete or non compliant images to prevent security regressions.

- Task Prioritization: Classify and organize requests and topics to ensure alignment with priority subjects and COE objectives.

- Developer Advocacy: Provide functional and technical support to users during the development, build, scanning, and releasing phases.

- Global Collaboration: Assist subsidiaries and partners during the onboarding phase to ensure seamless integration into the secure container ecosystem.

Technical &

- Behavioral Competencies

Specific Qualifications

- Containerization: Expert level knowledge of Docker and container security management.

- Software Development: Proven experience in software engineering (specifically in Java, .NET, or Python) to enable deep dive vulnerability remediation.

- Security &
- Vulnerability Management: Expert level knowledge of identifying, analyzing, and fixing security flaws within application stacks.

- Toolchain Proficiency: Practical experience with CI/CD toolchains and security scanning tools.

- IT Infrastructure: Robust general knowledge of IT infrastructure and cloud environments.

Skills Referential (Required knowledge, skills and abilities)

Technical Skills

- Docker (expert level)

- Java

- .Net

- Python

- CI/CD toolchain

Behavioral Skills

- Analytical Ability: Ability to classify complex requests and prioritize key subjects effectively.

- Organizational Skills &
- Rigor: Highly disciplined in tracking activities, maintaining documentation, and meeting reporting deadlines.

- Collaboration &

- Teamwork: Ability to work effectively within an Agile organization and act as a "Developer Advocate."

- Resilience &

- Adaptability: Capable of managing changing priorities in a fast paced, global environment.

- Communication: Ability to communicate technical security requirements clearly to diverse developer teams.

Location: Chennai

Education Level: Bachelor's Degree or equivalent in Computer Science

Experience level: 5+ years

📌 30166-Java, Spring Boot, Jenkins, Docker(5.1-7 year)-CHE (Chennai)
🏢 CGI
📍 Chennai