Senior OS Engineer – Linux Security, Container Supply Chain
Job Description:
- Design, build, and maintain secure Linux-based operating system components
- Own end-to-end CVE remediation across Linux OS packages and system libraries
- Analyze vulnerabilities affecting core OS components
- Validate upstream fixes and determine patching or backporting strategies
- Build and maintain secure, minimal, production-ready container images
- Generate and maintain SBOMs for OS packages and container images
- Design and scale automated pipelines for OS patching, package rebuilding, and image generation
- Partner with platform, DevOps, infrastructure, and security teams
Requirements:
- 5+ years in Linux systems engineering, OS engineering, platform engineering, DevSecOps, or release engineering
- Deep expertise in Linux operating systems and distributions (Debian, RHEL, Ubuntu, Alpine)
- Strong experience with OS package management systems (apt, rpm, dnf, apk)
- Hands-on experience patching, rebuilding, or maintaining OS packages
- Strong understanding of Linux internals (processes, memory, filesystem, system libraries)
- Experience working with system-level libraries and dependencies (glibc, openssl, etc.)
- Deep knowledge of dependency resolution, ABI compatibility, and package lifecycle management
- Experience with container internals and Linux runtime behavior
- Experience remediating CVEs in OS packages and container environments
- Understanding of SBOMs, software provenance, signing, and artifact trust models
- Familiarity with supply chain security frameworks (e.g., SLSA, reproducible builds)
- Strong scripting/programming ability in Python, Bash, Go, or C/C++
Benefits:
- health, dental, and vision insurance
- paid time off
- equity participation