{"id":3430512,"url":"https://alion.io/job/rapidfort-senior-software-engineer-container-images-security","title":"Senior Software Engineer — Container Images & Security","company":{"id":1398,"name":"RapidFort","domain":"rapidfort.com","url":"https://alion.io/company/rapidfort","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":9,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":130000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Clair","optional":false},{"name":"CVE","optional":false},{"name":"Debian","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Grype","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Trivy","optional":false},{"name":"Ubuntu","optional":false},{"name":"Cosign","optional":true},{"name":"GitOps","optional":true},{"name":"Harbor","optional":true},{"name":"Helm","optional":true},{"name":"Kustomize","optional":true},{"name":"Sigstore","optional":true},{"name":"SLSA","optional":true},{"name":"Syft","optional":true}],"status":"live","first_seen_at":"2026-10-28T21:41:54Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-01T17:18:50Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Senior Software Engineer - Container Images & Security\nCitizenship Requirement: U.S. citizenship is required for this position due to work supporting federal government customers.\nLocation: Remote\nTeam: Engineering / Curated Images\nEmployment Type: Full-Time\nAbout the Role\nRapidFort is looking for a hands-on Senior Software Engineer to join our Curated Images team and help build, secure, and maintain production-ready container images at scale.\nThis role combines deep Linux engineering, vulnerability remediation, and software automation. You will own the container image lifecycle-from building minimal, reproducible images to analyzing and remediating CVEs, validating runtime compatibility, and automating ongoing maintenance and publishing.\nYou will work closely with engineering, infrastructure, and security teams to deliver secure, reliable images across Linux distributions and application stacks, including Python, Go, and Java. Success requires the ability to investigate package and dependency issues, implement fixes, and build automation that makes those fixes repeatable.\nWhat You’ll Do\nDesign, build, and maintain minimal, hardened container images across Linux distributions and application runtimes.\n\nOwn end-to-end CVE remediation across OS packages, libraries, runtimes, and dependencies, including analysis, patching, rebuilding, and validation.\n\nTroubleshoot complex package compatibility, dependency, build, and runtime issues while preserving application functionality.\n\nReduce image attack surface and size by removing unnecessary packages, binaries, and dependencies.\n\nBuild and improve automated pipelines for image builds, vulnerability scanning, remediation, testing, and publishing.\n\nDevelop tooling to manage image versioning, dependency updates, metadata, and release traceability.\n\nGenerate, validate, and maintain SBOMs to support software supply chain visibility and compliance.\n\nValidate image functionality, reproducibility, and compatibility with Kubernetes and other containerized environments.\n\nCollaborate with platform, infrastructure, and security teams to define image hardening standards and integrate curated images into development and deployment workflows.\n\nMaintain clear documentation that helps developers adopt and use curated images.\n\nContinuously improve remediation speed, image quality, build reliability, and operational efficiency.\n\nWhat You Bring\n5+ years of relevant experience in software engineering, Linux systems engineering, platform engineering, DevSecOps, or SRE.\n\nDeep understanding of Linux systems, with hands-on experience across distributions such as Debian, Ubuntu, Alpine, or RHEL.\n\nStrong experience building and optimizing Docker images, including multi-stage builds, image layering, and container filesystem structures.\n\nProven experience investigating and remediating CVEs in Linux packages and container images, including patching, rebuilding, and validating fixes.\n\nStrong working knowledge of Linux package management and dependency resolution using tools such as apt, apk, yum/dnf, or rpm.\n\nStrong programming or scripting skills in Python, Go, or Bash, with experience building maintainable automation and internal tooling.\n\nExperience developing and maintaining CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, or similar tools.\n\nHands-on experience with vulnerability scanners such as Trivy, Grype, or Clair, along with SBOM generation.\n\nSolid understanding of Kubernetes concepts, container lifecycles, and image deployment requirements.\n\nAbility to independently troubleshoot complex technical issues and collaborate effectively across engineering teams.\n\nNice to Have\nExperience building minimal or distroless images and maintaining a large catalog of container images.\n\nExperience building Linux packages from source or backporting security fixes.\n\nFamiliarity with SBOM formats and tools such as SPDX, CycloneDX, and Syft.\n\nExperience with image signing, provenance, and verification using Cosign or Sigstore.\n\nKnowledge of software supply chain security frameworks such as SLSA.\n\nFamiliarity with container registries such as Docker Hub, Harbor, or Amazon ECR.\n\nExperience with Helm, Kustomize, GitOps, or infrastructure-as-code workflows.\n\nExperience in a startup environment or regulated industry.\n\nWhat Success Looks Like\nReliable delivery of production-ready, hardened images with near-zero exploitable CVEs.\n\nScalable automation for image builds, remediation, validation, and publishing.\n\nFaster remediation turnaround while maintaining runtime compatibility and image quality.\n\nMeasurable reductions in image size and attack surface.\n\nRepeatable standards for secure, reproducible container image delivery.\n\nCompensation & Benefits\nBase salary: $130,000-$200,000, depending on experience and technical depth.\n\nEquity participation.\n\nComprehensive health, dental, and vision coverage.\n\nRemote-first work environment.\n\nOpportunity to solve complex Linux, container, and software supply chain security challenges.\n\nCareer growth within a rapidly scaling cybersecurity company.","description_format":"text","description_chars":5082,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Cloud Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-10-29T00:17:17Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":35,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/rapidfort-senior-software-engineer-container-images-security","json_url":"https://alion.io/job/rapidfort-senior-software-engineer-container-images-security.json","meta":{"generated_at":"2026-11-01T20:07:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30939,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1398},"rest":"https://alion.io/mcp/rest/get_company?id=1398"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frapidfort-senior-software-engineer-container-images-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frapidfort-senior-software-engineer-container-images-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frapidfort-senior-software-engineer-container-images-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rapidfort-senior-software-engineer-container-images-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frapidfort-senior-software-engineer-container-images-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3430512}},{"tool":"search_jobs","arguments":{"company":"rapidfort.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3430512},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}