Container Image Security

Container Image Security Cybersecurity Jobs

2 jobs found

3d ago

Sr. IT Application Security Engineer

Career Developers Reston, VA

Reston, VA

3d ago

$150k - $180k/yr Full time Senior Application Security Container Image Security

Apply Now

Job Description

Support enterprise application security in a hybrid role based in Reston, VA, focusing on WAF administration, container image security scanning, and SDLC/CI-CD security controls.

Responsibilities

Administer and enhance enterprise BIG-IP WAF capabilities, including building security policies, tuning rules, investigating false positives, troubleshooting application traffic issues, and maintaining web application protections
Design, implement, and operate application security controls across enterprise applications and supporting platforms
Perform container image security scanning and analyze vulnerabilities found in application and container images
Assess severity and business risk for container vulnerabilities and collaborate directly with development teams to prioritize and remediate findings
Partner with Development and DevOps teams to embed security controls into the SDLC and CI/CD pipelines
Design and operate web application and API security protections, including policy configuration, rule tuning, automation, and continuous improvement
Identify application security vulnerabilities, complete risk assessments, and recommend practical mitigation and remediation strategies
Develop and maintain application security policies, standards, procedures, and controls
Build and maintain security monitoring and telemetry for the application stack to improve proactive detection
Conduct technical investigations tied to application security incidents and vulnerabilities
Support container security activities, including image scanning, vulnerability risk assessments, and runtime security/hardening
Operate and support security technologies across cloud and/or on-premises environments
Troubleshoot security, application, and network-related issues and communicate findings and recommended actions clearly
Partner with senior IT stakeholders to interpret application security risks, priorities, and remediation needs

Requirements

6–8 years of Application Security experience designing, implementing, and operating security controls in enterprise application environments
Hands-on BIG-IP WAF administration, including building WAF policies, configuring protections, tuning rules/policies, troubleshooting in production, reducing false positives, and maintaining WAF controls
Hands-on container image security/scanning, including reviewing scan results, evaluating vulnerabilities, determining risk and remediation priorities, and working directly with development teams
Experience with a container security/scanning platform (tool not critical). Relevant examples include Prisma Cloud, Wiz, Snyk, or comparable technologies
Strong web application security knowledge, including OWASP Top 10 vulnerabilities and practical application of security controls
Experience conducting web application security scans, vulnerability assessments, and/or penetration testing
Experience partnering directly with Development and DevOps teams to integrate security into the SDLC and CI/CD pipelines
Experience with authentication and authorization technologies such as OAuth and OpenID
Strong troubleshooting and communication skills, able to explain security risks and remediation requirements to both technical teams and senior IT stakeholders
Bachelor’s degree in Information Security, Computer Science, Computer/Electrical Engineering, or a related discipline, and/or equivalent relevant professional experience
Demonstrated production experience administering BIG-IP WAF, including building and tuning WAF policies
Demonstrated hands-on experience with container image scanning and vulnerability management
Experience personally reviewing container vulnerabilities and collaborating with developers on remediation
Experience integrating security practices and controls into CI/CD and secure software development processes
Experience operating cloud-based and/or on-premises security platforms
Ability to investigate and troubleshoot security and network-related issues using established security methodologies and best practices
Strong communicator who can work effectively with developers, DevOps engineers, operations teams, and senior IT stakeholders
Collaborative and approachable, able to influence remediation and security improvements while maintaining cross-functional relationships
Proof of eligibility to work in the United States

Technologies

BIG-IP WAF
OWASP Top 10
OAuth
OpenID
Prisma Cloud
Wiz
Snyk
CI/CD
SDLC

Benefits

150-180K base salary + 7% Bonus

Location

Hybrid in Reston, VA 20190
3 days on-site per week (Tues/Wed)

View full job page →

1mo ago

Senior Security Engineer - Container & Cloud Security

Ecco Select New York, NY

New York, NY

1mo ago Closed

$65 - $65/hr Contract Cloud Native Security Cloud Native Workload Protection Cloud Platforms

This position is no longer accepting applications (closed Sep 28, 2026).

Job Description

Sr. Security Engineer on a policy-as-code team focused on automating container and cloud security governance across Azure and GCP with Wiz.

Responsibilities

Design, implement, and maintain cloud-native container security controls for Kubernetes platforms including AKS, GKE, and EKS.
Develop, tune, and maintain container threat detection rules to identify malicious activity, anomalous behavior, and indicators of compromise.
Monitor runtime security events, investigate alerts, and support triage and incident response for container and Kubernetes workloads.
Deploy and optimize Wiz Defend/CWPP capabilities, including runtime sensors, workload protection, and attack path analysis.
Create and automate security guardrails using Infrastructure as Code (Terraform, Helm) and GitOps, including admission controller policies and preventative controls.
Strengthen container software supply chain with image scanning, SBOM validation, image signing, and registry security.
Identify, prioritize, and remediate container vulnerabilities and misconfigurations using risk-based exposure analysis.
Develop and maintain Compliance-as-Code policies aligned to CIS, NIST, and STIG security benchmarks.
Route Wiz findings and threat intelligence into ServiceNow and enterprise vulnerability management workflows.
Partner with Security Operations, Cloud Engineering, DevSecOps, and application teams to improve detection coverage and cloud security posture.
Conduct threat hunting and proactive analysis to improve detection logic and enhance runtime protection capabilities.
Support post-incident reviews with root cause analysis, corrective action recommendations, and continuous improvement of detection and response.

Requirements

Strong cloud security knowledge across AI/ML platforms, model pipelines, data layers, IAM, networking, and logging.
Hands-on Wiz CNAPP expertise (CSPM, CIEM, DSPM, CWPP), including applying it to AI workloads, model hosting, and data pipelines.
Experience designing preventive and detective security controls across model, data, and platform layers.
Compliance-as-Code fluency, including mapping Wiz findings to STIGs, native cloud policies, CI/CD, and governance workflows.
Ability to interpret Wiz risk graphs and communicate risk-based exposure analysis for model misuse, data leakage, privilege escalation, and blast radius.
Kubernetes experience across AKS, GKE, and EKS.
Working knowledge of Terraform, Helm, and GitOps-based pipelines.

Technologies

Wiz, Wiz Defend, CWPP, CSPM, CIEM, DSPM
Kubernetes, AKS, GKE, EKS
Terraform, Helm, GitOps, Azure, GCP
CIS, NIST, STIG
ServiceNow
Container image scanning, SBOM, image signing, registry security
Admission controller, Infrastructure as Code, CI/CD

Benefits

401(k)
401(k) matching
Dental insurance
Health insurance
Paid time off
Retirement plan
Vision insurance

Nice to have

Direct, hands-on Wiz platform experience is a significant plus.
Container image/repository scanning experience.
Deeper Terraform or IaC pipeline background.
Open to strong, trainable candidates with somewhat less hands-on experience, as long as foundational cloud and container security skills are solid.

Contract details

Duration: 6 months initial; strong intent to convert to full-time
Engagement length: engagements on this team have extended up to 4 years
Schedule: full-time, approximately 3 days/week onsite
Pay: USD 65 per hour

Location & work authorization

Work location: Hybrid remote in New York, NY 10001
Primary location: New York, NY (hybrid)
Secondary location: NY tri-state area (NJ, Philadelphia, NYC) considered
Strong preference: Toronto, ON
Work authorization: GC or USC only

Interview process

Panel interview with the Hiring Manager and two technical leads

View full job page →

Container Image Security Cybersecurity Jobs

Sr. IT Application Security Engineer

Senior Security Engineer - Container & Cloud Security

Get Container Image Security Cybersecurity Jobs alerts