Apply on Employer Site

Docker, Inc · 2 hours ago

Senior Software Engineer, Supply Chain Security

United States

Full-time

Remote

Senior Level

$185K/yr - $261K/yr

Docker, Inc is a leading company in app development, providing tools that simplify the developer experience. The Senior Software Engineer in Supply Chain Security will focus on creating and maintaining secure container images, enhancing build systems, and ensuring a high-quality developer experience around security-first practices.

Developer PlatformDeveloper ToolsInformation TechnologySoftware

Comp. & Benefits

No H1B

Responsibilities

Creating and supporting secure container images and related metadata like SBOMs and vulnerabilities

Maintaining and enhancing SLSA Build Level 3 compliant build system leveraging BuiltKit and GitHub Actions

Collectively own the security posture and developer experience of using secure container images

Qualification

BuildKitGoContainer image securityGitHub ActionsLinux distributionsSoftware security toolingProgramming languagesContinuous integration

Required

Experience building container images with BuildKit

Proficiency in modern programming languages (we primarily use Go), but experience with a diverse range of languages is also an asset (Javascript, Java, PHP, Python)

Understanding of low-level container image primitives, i.e., manifests, indices, digests, attestations, etc

Familiarity with Linux distributions and compiling software from source

Experience with continuous integration systems, particularly GitHub Actions

Knowledge of software security tooling like Docker Scout