Senior Software Engineer, Patch Engineering & Vulnerability Remediation

About the role

Domino is building the Release Engineering & Vulnerability Remediation platform that ships hardened, auditable software to highly regulated customers. As a Senior Software Engineer you will own the hardened image pipeline and automate the end‑to‑end vulnerability remediation process.

Key responsibilities

• Design, implement and maintain a hardened container image pipeline that meets strict scan thresholds and reproducible‑build requirements.
• Develop an automated vulnerability triage system that deduplicates findings, routes them to owners and tracks SLA compliance.
• Generate SBOMs and VEX statements for every release to provide provenance and exploitability evidence.
• Lead the technical direction for the team and create runbooks that define long‑term remediation practices.

Required profile

• Experience shipping software or container images to regulated, on‑premises or air‑gapped environments.
• Deep fluency with container build systems, base‑image strategy, reproducible builds, Kubernetes and Helm.
• Hands‑on experience with vulnerability scanning, provenance tooling and the ability to distinguish real risk from scanner noise.
• Strong technical writing skills to produce evidence for auditors and security teams.

Required skills

• Go or Python programming.
• Container build systems (Docker, BuildKit, etc.).
• Kubernetes and Helm packaging.
• Vulnerability scanning tools and SBOM generation.