Security Platform / DevSecOps Engineer — Container & Cloud Security (5+ years of Exp)

🚀 WE’RE HIRING | Security Platform / DevSecOps Engineer — Container & Cloud Security

📍 Work Model: Hybrid

💼 Experience: 5–8 Years

🔐 Focus: DevSecOps | Container Security | Cloud Security | Kubernetes | CI/CD | GCP | CNAPP

In this role, you’ll work closely with Security, DevOps, SRE, Engineering, Compliance, and vendor teams to strengthen container and cloud security, reduce vulnerabilities, and enable secure software delivery at scale.

*🔐 Key Responsibilities

*

Drive hardened base image evaluations, POCs, technical validation, and rollouts.

Analyze and optimize Dockerfiles and container build workflows, including multi-stage builds, minimal/shell-less images, non-root execution, and dependency management.

Partner with engineering teams to migrate workloads involving NGINX, Go/protoc, Java, Ubuntu-based applications, and other production services.

Support GCP Artifact Registry integrations, image mirroring, pull-through cache models, self-hosted registries, synchronization, and tools such as Skopeo.

Integrate security tooling into CI/CD pipelines for vulnerability scanning, image hygiene, SBOM adoption, image signing/verification, and remediation.

Contribute to CNAPP and vulnerability management initiatives, including Wiz-related workflows.

Collaborate with vendors and internal teams on POCs, troubleshooting, architecture reviews, licensing, escalations, and rollout planning.

Support engineering controls for SOC2, GovRAMP, Vanta, and audit-readiness requirements.

Create clear technical documentation, migration guides, security patterns, and troubleshooting procedures.

Collaborate effectively with globally distributed teams across North America and APAC/India.

*🛠️ Required Skills & Experience

*

5–8 years of experience in DevSecOps, Security Engineering, Platform Engineering, Cloud Security, or a related field.

Strong hands-on experience with Docker, container image construction, multi-stage builds, Linux, and runtime hardening.

Practical experience with Kubernetes and production container environments.

Experience with CI/CD pipelines and secure software delivery.

Knowledge of container vulnerability scanning, image patching, SBOMs, image signing, and software supply-chain security.

Working knowledge of GCP and GCP Artifact Registry.

Strong troubleshooting skills for container build/runtime issues, dependencies, module paths, non-root execution, shell-less images, and registry access.

Strong scripting/automation skills with Bash, Python, Go-adjacent tooling, or similar.

**⭐ Preferred Experience

Hardened, minimal, or distroless container images.

Minimus, Chainguard, Wolfi, Alpine, Ubuntu, or similar secure image ecosystems.

Wiz, Orca, Vanta, Grype, Trivy, Snyk, or similar security tools.

SOC2, GovRAMP, CRA, NIS2, or related compliance initiatives.

Security integration into developer workflows with minimal engineering friction.

Experience working with global teams across North America and APAC.