230K–260K USD / year
Staff Software Engineer, Image Build & Release
DevOpsRemote — United States
Published on 2026-10-23
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Own the systems that build, secure, and deliver NodeZero container images to customer environments. Set technical direction for the image pipeline, signing and scanning practices, and over-the-air updates, while contributing code and mentoring engineers.
About the company
Horizon3.ai is a technology company specializing in cybersecurity solutions, focusing on automated penetration testing and threat detection for enterprises. They provide a range of services aimed at enhancing security posture and risk management for organizations across various sectors.
The team
Image Build & Release team; reports to the Client Platform Engineering Manager and partners with the OTA Services team.
Stack
DockerKubernetesGoPythonGitHub ActionsGitLab CITektonCosign
What you'll do
- Design and own the CI/CD pipeline for signed and scanned NodeZero container images.
- Define image hardening, vulnerability scanning, and signing strategies.
- Partner on reliable OTA updates, including rollout, rollback, and version pinning.
- Set standards for reproducible builds, artifact versioning, and release gates.
- Mentor engineers through reviews and architectural pairing.
- Operate build and release infrastructure and respond to related incidents.
What we're looking for
- 8+ years of software engineering experience specializing in build systems, CI/CD, or container release engineering.
- Expert knowledge of Docker image construction, optimization, and hardening.
- Experience with image signing and scanning toolchains.
- Track record operating CI/CD pipelines at scale.
- Deep understanding of Kubernetes image distribution and updates.
- Experience designing and operating OTA or remote update systems.
- Proficiency in Go, Python, or shell scripting.
- Experience with artifact registries and lifecycle management.
Nice to have
- Experience with SLSA, SBOM generation, or provenance attestation.
- Cybersecurity experience or software for on-premises, air-gapped, or regulated environments.
- Experience with Helm charts or Kubernetes operators.
- Familiarity with eBPF or kernel-level tooling.
Benefits
- Stock options may be available.
- Health, vision, and dental coverage for employees and family.
- Flexible vacation policy.
- Generous parental leave.