About Triam Security:

Triam Security is revolutionizing software supply chain security through our advanced
vulnerability database platform and CleanStart product line. We provide hardened,
vulnerability-free container images with built-in security, compliance, and performance
benefits. Our mission is to transform container security by eliminating pre-existing
vulnerabilities and providing full visibility and control over the software supply chain.

Role Overview:

As a Senior DevSecOps Engineer on our Build Maintenance team, you will lead the ongoing
maintenance of build systems and processes for existing CleanStart container images. You
will implement security updates, optimize build pipelines, and ensure the continued
integrity of our container supply chain. Your expertise will be crucial in maintaining our
zero-vulnerability standard while improving build efficiency and reliability.

Key Responsibilities:

• Lead the maintenance and improvement of existing build pipelines
• Implement security updates and patches in build processes
• Develop strategies for efficient rebuilding of container images when new
  vulnerabilities are discovered
• Optimize build performance and resource utilization
• Maintain build infrastructure and environments
• Implement improved validation and verification in build processes
• Collaborate with Design teams to implement specification updates
• Mentor junior engineers on build maintenance best practices
• Contribute to build system documentation and standards
• Implement and maintain automated testing for build outputs

Required Qualifications:

• 5+ years of experience in DevOps, CI/CD, or build engineering
• Strong understanding of container build technologies and maintenance
• Experience with build pipeline optimization and improvement
• Proficiency in scripting and automation (Bash, Python, Go, etc.)
• Knowledge of software supply chain security and vulnerability management
• Experience with CI/CD systems and build infrastructure maintenance
• Understanding of version control and change management
• Strong problem-solving and analytical skills
• Excellent communication and collaboration abilities

Preferred Qualifications:

• Experience with container image rebuilding strategies
• Knowledge of secure update processes for container images
• Familiarity with automated testing and validation frameworks
• Experience with GCP or other cloud build environments
• Background in security engineering or secure DevOps
• Understanding of compliance requirements for build systems
• Experience with monitoring and observability in build pipelines
• Knowledge of disaster recovery for build environments