About the role
Job Description
The employee will be dedicated full-time to ensuring the security and license compliance of our Everywhere AI product, including scanning for open-source license violations and security vulnerabilities, as well as designing, building, and maintaining its CI/CD deployment pipeline.
What You Will Do
* Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD. * Implement automated vulnerability scanning for Docker images and dependencies. * Identify, investigate, and remediate security vulnerabilities in container images. * Harden Docker images by minimizing attack surfaces and applying security best practices. * Implement container image signing and verification to ensure software supply chain integrity. * Automate security checks and enforce security policies throughout the CI/CD lifecycle. * Secure and maintain Kubernetes workloads, configurations, and deployments.
Qualifications
What We're Looking For
* Strong hands-on experience with Docker, container security, and image optimization. * Practical experience building and maintaining GitLab CI/CD pipelines. * Hands-on experience with Kubernetes, including workload deployment, configuration, and security. * Solid understanding of Linux security, system hardening, and vulnerability management. * Experience with container vulnerability scanning tools (Trivy, Grype, or similar). * Familiarity with container image signing and verification (Cosign, Sigstore). * Strong scripting skills (Bash, Python) and a security-first mindset.
Preferred Qualifications
* 3+ years of experience in DevOps, DevSecOps, or Platform Engineering. * Experience implementing security controls in CI/CD pipelines. * Knowledge of Kubernetes security best practices, including RBAC, NetworkPolicies, Pod Security Standards, and admission controllers. * Knowledge of software supply chain security, SBOMs, and artifact provenance. * Experience working with minimal and hardened container images (Alpine, Distroless, Chainguard, or similar). * Familiarity with Helm and container registries. * Understanding of security standards and best practices (CIS Benchmarks, OWASP, NIST).
Nice to Have
* Experience with Kubernetes policy-as-code tools (OPA Gatekeeper, Kyverno). * Familiarity with Kubernetes security tools (Falco, Kubescape, kube-bench). * Experience with Infrastructure as Code (Terraform, Ansible). * Knowledge of the SLSA framework and software supply chain security practices. * Experience with automated dependency updates and vulnerability remediation (Renovate, Dependabot).
Additional Information
Benefits
At Gcore, we want you to do your best work and enjoy the journey. Our benefits are designed to support your growth, well-being, and life beyond work:
* Competitive compensation * Flexible working hours and hybrid or remote options, depending on your role * Work from anywhere in the world for up to 45 days per year * Private medical insurance for you and your family* * Extra paid vacation and sick leave days* * Support for life’s important moments and celebrations * Language courses to help you connect and grow * Modern, welcoming offices with snacks, drinks, and entertainment* * Team sports and social activities*
*Benefits may vary depending on your location.
Equal Opportunity Employer
We provide equal opportunity to all applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity, gender expression, national origin, disability, or any other legally protected characteristics.