Senior Supply Chain Security Engineer (East Coast Preferred)

Responsibilities

• Author and maintain definitions for hardened system packages and container images, including build steps, upstream tracking, multi-architecture support and reproducibility controls.
• Adapt and maintain upstream Helm charts so they work correctly with DHI images under non-root, restricted and production-shaped Kubernetes security constraints.
• Track upstream releases, semver patterns, monorepos, dependency chains and breaking changes, then make pragmatic decisions about when to update, patch, pin or deviate.
• Triage and remediate vulnerabilities across OS packages, application dependencies, images and charts, including VEX and no-upstream-fix cases that require explicit security judgement.
• Write and improve Go-based integration tests, validators and policy checks that prove packages, images and charts behave correctly in real environments.
• Review human-authored and machine-authored pull requests against DHI standards, distinguish blocking issues from advice and give contributors a clear path forward.
• Improve the DHI Factory by converting repeated work, review corrections and escaped defects into automation, tests, validators and reusable authoring patterns.
• Help classify work into deterministic, specialist and judgement paths so people spend time where their expertise changes the outcome.
• Partner with Product, Security
• Support and customer-facing teams to turn demand and incidents into prioritised content and durable improvements.

Languages