Senior Linux Distribution Engineer – Software Supply Chain Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Linux Distribution Engineer responsible for securing Linux package ecosystems and container images. Building, maintaining, and validating software delivery at scale with close collaboration across teams.
Responsibilities:
- Own end-to-end vulnerability remediation across Linux package ecosystems and container images.
- Analyze CVEs affecting OS packages, runtimes, libraries, and transitive dependencies across multiple Linux distributions.
- Validate upstream fixes, evaluate patch applicability, and determine appropriate remediation strategies.
- Rebuild, backport, patch, curate, sign, and publish packages across multiple Linux distribution branches.
- Maintain and manage trusted package repositories across diverse Linux ecosystems.
- Resolve complex dependency, compatibility, and ABI issues across distributions and package versions.
- Ensure package and image updates do not break customer environments, builds, or runtime compatibility.
- Design and scale automated pipelines for package rebuilding, validation, remediation, signing, publishing, and image generation.
- Integrate package validation, repository management, and remediation workflows into pipelines.
- Generate and maintain SBOMs, package metadata, provenance data, and trusted software artifacts.
- Improve image performance, package footprint, startup efficiency, and operational reliability.
- Research emerging threats and best practices in Linux distributions, containers, Kubernetes, and software supply chain security.
Requirements:
- 5+ years of experience in Linux systems engineering, Linux distribution engineering, platform engineering, DevSecOps, release engineering, or SRE.
- Deep expertise in Linux distributions and package ecosystems.
- Strong experience with Linux package build systems and tooling including rpmbuild, dpkg-buildpackage, APKBUILD/abuild, and associated repository and release tooling.
- Strong hands-on experience with Linux package managers including dpkg/apt, rpm/yum/dnf, apk, and associated repository tooling.
- Proven experience rebuilding, patching, backporting, maintaining, or publishing Linux packages across distribution versions.
- Strong understanding of package repositories, dependency resolution, ABI compatibility, package signing, and release workflows.
- Experience identifying and remediating vulnerabilities within Linux packages and containerized environments.
- Deep understanding of container internals, Linux, namespaces, and runtime behavior.
- Strong scripting or programming skills in Bash, C/C++, Python, Go, and other languages.
- Experience building CI/CD automation for package validation, remediation, release, and repository management workflows.
- Familiarity with software supply chain security concepts including SBOMs, provenance, signing, and artifact trust.
- Strong troubleshooting skills across Linux systems, package ecosystems, dependency graphs, and build pipelines.
Benefits:
- healthcare
- PTO
- equity participation
Similar Jobs
Cybersecurity RMF Specialist
Cybersecurity RMF Specialist developing policies for cloud services deployment in support of the US Army. Requires TS/SCI clearance and extensive experience in various cybersecurity frameworks.
Senior Product Security Engineer – Sovereign Cloud
Senior Product Security Engineer focused on cloud security compliance and technical discussions. Collaborating across teams to improve security processes and mentor junior members.
Data Security Engineer
Data Security Engineer responsible for designing and implementing data protection strategies at CAQH. Collaborating across data environments to safeguard sensitive information and ensure regulatory compliance.
Identity Security Engineering Lead
Identity Security Engineering Leader responsible for cloud-first IGA/IAM modernization and engineering automation. Guiding a high-performing team in optimizing identity lifecycle management and security solutions.
Senior Software Architect – Seguridad
Senior Software Architect focused on security for critical banking applications at BBVA. Leading initiatives in software design, security integration, and compliance with banking standards.
Business Development Lead – Defence & Security
Business Development & Capture Lead for Global Spatial Technology Solutions driving revenue growth in defence sector. Engaging senior stakeholders and leading proposal development across global markets from a remote location.
Program Manager, Security Business Enablement
Program Manager in Security Business Enablement at Stripe, engaging customers on security activities. Leading efforts in security policy development and program health reporting.
Senior Director Analyst, AI Cybersecurity
Senior Director Analyst in AI Cybersecurity providing actionable insights and research for clients at Gartner. Focused on cybersecurity challenges and AI governance in a rapidly evolving landscape.
Information Security Lead
Information Security Lead managing and operating security program at Anomaly, focusing on compliance and risk management to support AI-driven healthcare innovations.
Security Consultant II
Security Consultant II providing end-to-end trusted advisory and technical solutions for high-profile Akamai customers. Collaborating with teams and delivering innovative security solutions while ensuring customer success.
Security Architect
Security Architect responsible for designing secure software solutions at Agfa HealthCare, collaborating with cross-functional teams in a fully remote environment.
Security Manager, CxM
Lead information security efforts for CxM Practice Area at Dentsu, ensuring secure product delivery and risk management. Collaborate across teams to strengthen security culture and capabilities.
Senior Cybersecurity Engineer
Senior Cyber Program Analyst providing technical expertise across cybersecurity initiatives for Federal, Intelligence, and Defense customers. Leading Zero Trust security solutions and collaborating with teams.
Senior Cloud Security Architect
Senior Cloud Security Architect leading Zero Trust architecture and AI-Native security strategy for cloud environments. Designing security policies and conducting threat modeling in support of cyber missions.
Security & Sustainability Program Coordinator
Security and Sustainability Program Coordinator at JLL coordinating operations across security, facilities, and sustainability programs. Ensuring safe, secure, and environmentally responsible operations.
Senior Security Engineer, Identity & Access Management
Senior Security Engineer designing and managing IAM systems for Valon’s workforce and customer authentication. Collaborating across teams to secure AI-powered capabilities and optimize security processes.
Senior Product Security Engineer – Customer Platform
Senior Product Security Engineer at Valon ensuring the security of SaaS platform architecture and customer-facing security capabilities. Collaborate with cross-functional teams to optimize security processes.
Head of Security, GRC
Head of Security GRC overseeing governance, risk, and compliance for Valon, an AI-native fintech startup. Ensuring security practices for customer data and regulatory requirements are met.
Senior Cloud Security Engineer
Senior Cloud Security Engineer responsible for securing a massive hybrid ecosystem for USPS. Implementing strategies for compliance, identity management, and threat detection in cloud environments.
Compliance/Security Officer
Compliance Officer overseeing comprehensive compliance program while ensuring adherence to federal and state laws. Leading policies, audits, and risk assessments in a healthcare context.