About Triam Security:

Triam Security is revolutionizing software supply chain security through our advanced
vulnerability database platform and CleanStart product line. We provide hardened,
vulnerability-free container images with built-in security, compliance, and performance
benefits. Our mission is to transform container security by eliminating pre-existing
vulnerabilities and providing full visibility and control over the software supply chain.

Role Overview:

As an Associate DevSecOps Engineer on our Design team, you will contribute to the design
and specification of new hardened container images. You will assist in creating image
definitions, document design requirements, and support the implementation of security
standards in our container images. Your role is vital in expanding our CleanStart product
line with secure, efficient, and vulnerability-free container images.

Key Responsibilities:

• Assist in designing specifications for new hardened container images
• Create and maintain documentation for image design requirements
• Support the development of declarative build definitions
• Research package dependencies and compatibility requirements
• Help identify and eliminate unnecessary components to reduce attack surface
• Test and validate image designs in different environments
• Contribute to automation scripts for image design processes
• Learn and apply secure design principles for container images
• Collaborate with senior engineers on improving design methodologies
• Support the continuous improvement of image design standards

Required Qualifications:

• 1-2 years of experience in DevOps, system administration, or related fields
• Basic knowledge of container technologies and image creation
• Familiarity with Linux systems and package management
• Understanding of scripting languages (Bash, Python, etc.)
• Interest in security and secure design principles
• Good documentation and communication skills
• Attention to detail and analytical thinking
• Eagerness to learn and grow in container security

Preferred Qualifications:

• Experience with Docker, Podman, or other container tools
• Familiarity with infrastructure as code concepts
• Basic understanding of vulnerability management
• Knowledge of CI/CD pipelines and automation
• Experience with version control systems (Git)
• Interest in minimalist container design
• Exposure to cloud platforms (GCP, AWS, Azure)
• Background in software development or system administration