Senior Software Engineer, Patch Engineering & Vulnerability Remediation

Responsibilities

• In your first year, you will
• In your first year, you will own the hardened image pipeline for our most demanding deployments and cut time-to-remediate for critical and high findings to a published, defensible SLA.
• You will replace one-off vulnerability firefighting with an automated path from scan to fix, including SBOM and exploitability statements generated on every release.
• You will make "we are not fixing this, and here is why" a documented engineering position backed by evidence, rather than a conversation repeated with every customer.
• You will set the technical direction and tooling that the next engineers on this team build on.
• What we look for in this role
• Experience shipping and maintaining software or container images into regulated, on-premises, or air-gapped environments where you cannot simply redeploy to fix a problem
• Deep fluency with container build systems, base image strategy, and reproducible builds, plus working knowledge of Kubernetes and Helm packaging
• Hands-on experience with vulnerability scanning and provenance tooling, and the judgment to distinguish a real risk from scanner noise
• Go and/or Python strong enough to build automation and to patch upstream open-source dependencies when no fix exists

Languages