Container Security Engineer Job at Citi (London)

Senior Backend Engineer - Container Scanning & Security

Endor Labs is on a mission to enhance developer productivity and accelerate open...

Location

India , Bengaluru

Salary:

Not provided

Endor Labs

Expiration Date

Until further notice

Requirements

Expert knowledge of container technologies and container security
Bachelor's degree in engineering with at least 5 years of experience in building scalable platforms for product/SaaS companies
Previous experience building security tooling
At least 3 years of experience in Golang programming with a focus on microservices/distributed architecture
Practical experience designing APIs with one or more frameworks (gRPC [preferred], ReST, GraphQL, Thrift, etc.)
Ability to build and design technical solutions from scratch
Able to work in a fast-paced environment with evolving requirements
Ability to solve problems creatively and independently when in uncharted or unfamiliar territory
Practical experience in troubleshooting distributed systems and the ability to identify root causes
Comfortable with performing and receiving code reviews, providing constructive feedback, and maintaining code quality

Job Responsibility

Design, develop, and maintain a container security scanning solution that generates Software Bill of Materials (SBOM) and identifies vulnerabilities
Implement container image analysis to extract dependencies from package managers
Work on container signing and provenance tracking
Be part of dependency resolution development team working on a distributed, microservices-based system
Build and own features end-to-end including unit and integration tests
Have the autonomy and the responsibility to design and implement quality features that will be used by customers
Use best practices of observability to ensure that the product and the platform have the best reliability and availability for our customers
Generate comprehensive SBOMs for container images

Fulltime

Security and Application Security Engineer

Beacon Technologies is seeking a Security and Application Security Engineer. The...

Location

United States , Las Vegas

Salary:

Not provided

Beacon Technologies

Expiration Date

Until further notice

Requirements

Minimum of five years of Information Security experience with at least two years of application-level security
Strong communication skills: ability to convey and document security guidelines, requirements, and coding best practices
Familiarity with Security Best Practices in common coding languages
Application Penetration Testing / API Security Testing
Software Development Life Cycle Design and Implementation
Static and Dynamic Application Testing Tools and Methods
Container and orchestration security (Kubernetes, Docker, Octopus, GitHub, etc.)
Familiarity with Application Security Testing Frameworks such as OWASP
Strong logical and analytical thinker
exceptional skills in security systems solutions

Job Responsibility

Operate as a liaison between the Security Team and the Development Teams
Preserve PCI and SOX Security Certification programs with a primary focus on ensuring compliance with the appropriate industry standards and security controls
Supporting incident response and architecture review whenever applications security expertise is needed
Integrating threat modeling practices into the SDLC
Work with other staff to perform periodic scans and evaluation of system security including areas such as patch management, penetration testing, vulnerability assessments, and other types of InfoSec-related tasks
Assist in identifying and communicating security exposures, information security incidents or non-compliance situations to IT management or the CISO as appropriate. Duties may also include collecting and documenting cyber security and incident response event data as necessary.

What we offer

Career advancement opportunities
extensive training
excellent benefits including paying for health and dental premiums for salaried employees.

Fulltime

Principal Security Engineer

We’re building a world-class global Security team as part of our Trust Program. ...

Location

India , Hyderabad

Salary:

Not provided

Highspot

Expiration Date

Until further notice

Requirements

10+ years of robust, progressive experience in security engineering, application security, DevSecOps, incident detection and response, or closely related fields
Advanced proficiency in at least one programming language (Python, Ruby, Go, Rust, JavaScript), with deep experience conducting detailed code reviews and security assessments across multiple languages
Hands-on experience with deploying, operating, and interpreting results from security tools such as static analyzers, web vulnerability scanners, supply chain analysis scanners, and host-based intrusion detection systems
Demonstrated experience mentoring, coaching and guiding junior and mid-level security engineers, contributing to a strong team culture, and supporting peer development as a senior individual contributor
Demonstrated proactive approach, strong continuous learning orientation, and curiosity about emerging threats, security trends, and innovative technologies
Extensive expertise securing cloud-native environments (AWS, Azure, GCP, containers, microservices), with in-depth knowledge of modern cloud security risks and defenses
Demonstrated ability to embrace being wrong, practice humility, continuously learn from experiences, and actively seek insights through thoughtful questioning and collaboration

Job Responsibility

Lead comprehensive application security assessments, advanced threat modeling sessions, and secure code reviews across critical product features, internal tooling, endpoints, and third-party integrations
Collaborate strategically with product engineering to establish and enhance secure-by-default and privacy-by-design practices within the software development lifecycle (SDLC)
Lead and otherwise participate in incident detection, investigation, triage, containment, and root cause analysis for high impact security incidents, providing mentorship and guidance to junior engineers as required
Drive the development and continuous improvement of sophisticated detection rules, response automation, and optimized alert management across cloud environments, corporate infrastructure, and SaaS platforms
Lead and participate in complex vulnerability remediation processes, and effectively respond to security issues discovered by both internal teams and external sources
Document technical findings and strategic decisions in a clear and accessible manner, and procedural enhancements
significantly contribute to comprehensive security playbooks and knowledge repositories
Manage and oversee asksecurity@ request handling, and actively participate in sprint-based security activities, balancing strategic and tactical execution
Actively participate in the security on-call rotation, or provide senior-level guidance as required during an event and aid in rapid response capabilities to protect our 24x7 platform and global workforce

Fulltime

Principal Product Security Engineer

As a Principal Product Security Engineer you will be the Technical SME, promote ...

Location

India

Salary:

Not provided

Atlassian

Expiration Date

Until further notice

Requirements

10+ years of experience working in security
Demonstrated expertise and experience working in security-focused roles
Significant experience collaborating with engineering teams to conduct security assessments and threat modeling for on-premise as well as SaaS products
Strong expertise in cloud security, with a focus on AWS, GCP, and Azure, coupled with significant experience in container security, particularly in Docker and Kubernetes
Significant expertise in overseeing security design reviews for transitioning services from monolithic to microservices architecture
Experience coding in Java, JavaScript, Python, or Go, and at least one scripting language
Experience leading large-scale projects from start to finish and mentoring other security practitioners
Adept experience providing SME knowledge and guidance to stakeholders and engineering functions

Job Responsibility

Promote automation, review platform and service designs and architecture and drive our security teams to equip the engineering partner teams with the latest tools, techniques and methodologies to build secure products by default
Partnering with our security teams and leadership groups across Atlassian's vast footprint to uplift our security programs

What we offer

health coverage
paid volunteer days
wellness resources

Fulltime

Security Engineer - Product & Production Infrastructure

Wiz is looking for a Security Engineer for Product & Production Infrastructure w...

Location

United Kingdom

Salary:

Not provided

Wiz

Expiration Date

Until further notice

Requirements

5+ years of experience in security engineering or security operations work in cloud environments
AWS platforms and services (we will also consider equivalent experience in Azure and GCP)
Kubernetes (AWS EKS) and container infrastructure
IAM and managing cloud identities at-scale
Secure development and application of IAC solutions (Terraform, Helm)
Cloud-native observability and management tools
Development experience in Go, Python and Rust

Job Responsibility

Lead threat modeling and security review exercises across Wiz’s production and CI/CD environments – identifying and mitigating risks in our products and the cloud services that support them
Drive vulnerability management and remediation efforts – prioritizing issues, implementing mitigations, and designing strategic preventative controls
Extend our detection and response capabilities – building scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents
Build deep functional partnerships with Wiz’s engineering and operations teams – helping them deliver secure-by-design solutions

Security Engineer - Product & Production Infrastructure

Wiz is looking for a Security Engineer for Product & Production Infrastructure w...

Location

Germany

Salary:

Not provided

Wiz

Expiration Date

Until further notice

Requirements

5+ years of experience in security engineering or security operations work in cloud environments
AWS platforms and services (we will also consider equivalent experience in Azure and GCP)
Kubernetes (AWS EKS) and container infrastructure
IAM and managing cloud identities at-scale
Secure development and application of IAC solutions (Terraform, Helm)
Cloud-native observability and management tools
Development experience in Go, Python and Rust

Job Responsibility

Lead threat modeling and security review exercises across Wiz’s production and CI/CD environments – identifying and mitigating risks in our products and the cloud services that support them
Drive vulnerability management and remediation efforts – prioritizing issues, implementing mitigations, and designing strategic preventative controls
Extend our detection and response capabilities – building scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents
Build deep functional partnerships with Wiz’s engineering and operations teams – helping them deliver secure-by-design solutions

Staff Product Security Engineer

We’re looking for a Staff Product Security Engineer to lead the design and imple...

Location

United States

Salary:

184000.00 - 252000.00 USD / Year

AlphaSense

Expiration Date

Until further notice

Requirements

7+ years of experience in product, application, or cloud security engineering
Deep understanding of secure SDLC, threat modeling, and secure architecture design
Proven expertise with AWS cloud security concepts and best practices
Strong experience with container security, orchestration, and runtime protection
Proficiency in Python, Java, and/or JavaScript for security automation, code review, and tooling
Experience securing AI/ML pipelines, data workflows, or model-serving infrastructure
Familiarity with DevSecOps and continuous integration/deployment environments

Job Responsibility

Embed robust security practices throughout the software and AI development lifecycle (SDLC)
Lead secure design reviews, threat modeling, and risk assessments for AI-driven products, APIs, and backend services
Partner with engineering and product teams to ensure security, privacy, and compliance by design
Build and maintain security automation and governance frameworks that integrate seamlessly into development workflows
Architect and enforce security controls for AI/ML systems, including model training, data pipelines, and inference environments
Identify and mitigate AI-specific attack vectors such as data poisoning, model inversion, prompt injection, and model theft
Collaborate with governance and compliance teams to align with ethical AI principles and frameworks like NIST AI RMF and the EU AI Act
Implement model provenance, integrity, and auditability controls to ensure responsible and secure AI operations
Partner with DevOps and SRE teams to secure service meshes, container networking, and secrets management
Drive software supply chain security, including artifact integrity, dependency management, and vulnerability reduction

What we offer

Competitive compensation, benefits, and career growth opportunities
Opportunity to shape and drive product security strategy
Collaborative and security-minded engineering culture
Work on cutting-edge security challenges in a fast-growing company
Performance-based bonus, equity, and a generous benefits program

Fulltime

Application Security Engineer

This role is for a senior engineer with hands-on experience in building applicat...

Location

Israel , Tel Aviv

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Expertise of cloud engineering and application security, demonstrated by previous roles in the domain and industry certification
good understanding of security capabilities supporting application development such as authentication, authorization, credential management, certificate management, encryption for on-prem and cloud
understanding of container orchestration technologies
hands-on experience developing high-performance solutions following Agile methodologies ideally backend Java experience
containers K8s hands on experience understanding the lifecycle of a containers and integration with security boundaries-advantage
experience in building end to end solutions for the cloud domain in a secure manner
familiarity with GoLang, Node.js UI authentication is an advantage.

Job Responsibility

Technical engineer working with key stakeholders of cloud engineering and application security experts
explore and resolve key application security gaps and drive their resolutions
develop modules that resolve identified gaps in a centralized optimized manner such as credential management, authentication, authorization, end-to-end scanning tools
act as an advisor and expert lead to various development teams across the company to help them improve their expertise within cloud engineering and application security.

Fulltime

Container Security Engineer

Citi

Location:
United Kingdom , London

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
April 30, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Container Security Engineer

Senior Backend Engineer - Container Scanning & Security