Security Engineer II

Responsibilities

• Support the design, development, and maintenance of vulnerability management services.
• Improve vulnerability attribution across applications, infrastructure, containers, and owning teams.
• Build tools that provide application teams with actionable security remediation guidance.
• Develop container security capabilities including image scanning, vulnerability reporting, base-image lifecycle tracking, and container inventory management.
• Integrate container security checks earlier in the software development lifecycle and CI/CD pipelines.
• Work with Kubernetes-based services, container registries, and deployment platforms.
• Develop and maintain backend services, APIs, automation scripts, and data-processing workflows.
• Implement monitoring, dashboards, alerts, and operational checks for reliable service operation.
• Support audit, control, reporting, documentation, evidence collection, and operational recordkeeping.
• Collaborate with application, infrastructure, security, and platform teams on security issues and remediation.

Requirements

• Formal training or certification in software engineering, security engineering, infrastructure engineering, or a related technology area, plus 2+ years of applied experience.
• Working knowledge of vulnerability management, application security, infrastructure security, or container security.
• Hands-on experience with Java, Python, or a similar programming language.
• Familiarity with Docker, container images, container registries, and container security practices.
• Experience with Kubernetes or another container orchestration platform.
• Familiarity with Jenkins, Spinnaker, or similar CI/CD tools.
• Basic understanding of Terraform or similar infrastructure-as-code tools.
• Ability to build, test, deploy, and support software components in a team environment.
• Strong analytical, problem-solving, accuracy, and operational-detail skills.
• Ability to explain technical issues clearly to engineering and security stakeholders.
• Preferred experience with container security or vulnerability management platforms, vulnerability remediation, asset inventory, runtime security, cloud/container security, observability, dashboards, alerts, and production support.
• Familiarity with Go and experience working in agile software development teams are preferred.