Senior Software Engineer (Container Security)

Location: Remote, United States. U.S. citizenship is required because the role supports federal government customers.

Salary: $130,000–$200,000 base salary per year, depending on experience and technical depth.

Company

hirify.global is a rapidly scaling cybersecurity company developing solutions for secure, production-ready container images and software supply chain security.

What you will do

• Design, build, harden, and maintain minimal container images across Linux distributions and application runtimes.
• Own CVE remediation across operating-system packages, libraries, runtimes, and dependencies, including analysis, patching, rebuilding, and validation.
• Troubleshoot package, dependency, build, and runtime issues while preserving application functionality.
• Build automation for image builds, vulnerability scanning, remediation, testing, versioning, dependency updates, metadata, and publishing.
• Generate and maintain SBOMs; validate image reproducibility, functionality, and compatibility with Kubernetes and other containerized environments.
• Collaborate with engineering, infrastructure, platform, and security teams on hardening standards, workflow integration, documentation, and operational improvements.

Requirements

• 5+ years of relevant experience in software engineering, Linux systems engineering, platform engineering, DevSecOps, or SRE.
• U.S. citizenship due to work supporting federal government customers.
• Deep Linux systems knowledge and hands-on experience with distributions such as Debian, Ubuntu, Alpine, or RHEL.
• Strong experience building and optimizing Docker images, including multi-stage builds, image layering, and container filesystem structures.
• Experience investigating and remediating CVEs in Linux packages and container images, including patching, rebuilding, and validating fixes.
• Strong knowledge of Linux package management and dependency resolution using apt, apk, yum/dnf, or rpm.
• Strong programming or scripting skills in Python, Go, or Bash, including maintainable automation and internal tooling.
• Experience developing and maintaining CI/CD pipelines with GitHub Actions, GitLab CI, Jenkins, or similar tools.
• Hands-on experience with vulnerability scanners such as Trivy, Grype, or Clair, plus SBOM generation.
• Solid understanding of Kubernetes concepts, container lifecycles, and image deployment requirements, with the ability to troubleshoot complex issues independently and collaborate across engineering teams.

Nice to have

• Experience building minimal or distroless images and maintaining a large container-image catalog.
• Experience building Linux packages from source or backporting security fixes.
• Familiarity with SBOM formats and tools such as SPDX, CycloneDX, and Syft.
• Experience with image signing, provenance, and verification using Cosign or Sigstore, and knowledge of SLSA.
• Familiarity with Docker Hub, Harbor, or Amazon ECR, plus Helm, Kustomize, GitOps, or infrastructure-as-code workflows.
• Experience in a startup environment or regulated industry.

Culture & Benefits

• Remote-first, full-time work environment.
• Equity participation.
• Comprehensive health, dental, and vision coverage.
• Career growth within a rapidly scaling cybersecurity company.
• Opportunity to solve complex Linux, container, and software supply chain security challenges.