Companies in this catalog do not charge applicants. Never send money to apply.
The employee will be dedicated full-time to ensuring the security and license compliance of our Everywhere AI product, including scanning for open-source license violations and security vulnerabilities, as well as designing, building, and maintaining its CI/CD deployment pipeline.
What You Will Do
Design, build, and maintain secure CI/CD pipelines using GitLab CI/CD.
Implement automated vulnerability scanning for Docker images and dependencies.
Identify, investigate, and remediate security vulnerabilities in container images.
Harden Docker images by minimizing attack surfaces and applying security best practices.
Implement container image signing and verification to ensure software supply chain integrity.
Automate security checks and enforce security policies throughout the CI/CD lifecycle.
Secure and maintain Kubernetes workloads, configurations, and deployments.
What We're Looking For
Strong hands-on experience with Docker, container security, and image optimization.
Practical experience building and maintaining GitLab CI/CD pipelines.
Hands-on experience with Kubernetes, including workload deployment, configuration, and security.
Solid understanding of Linux security, system hardening, and vulnerability management.
Experience with container vulnerability scanning tools (Trivy, Grype, or similar).
Familiarity with container image signing and verification (Cosign, Sigstore).
Strong scripting skills (Bash, Python) and a security-first mindset.
Preferred Qualifications
3+ years of experience in DevOps, DevSecOps, or Platform Engineering.
Experience implementing security controls in CI/CD pipelines.
Knowledge of Kubernetes security best practices, including RBAC, NetworkPolicies, Pod Security Standards, and admission controllers.
Knowledge of software supply chain security, SBOMs, and artifact provenance.
Experience working with minimal and hardened container images (Alpine, Distroless, Chainguard, or similar).
Familiarity with Helm and container registries.
Understanding of security standards and best practices (CIS Benchmarks, OWASP, NIST).
Nice to Have
Experience with Kubernetes policy-as-code tools (OPA Gatekeeper, Kyverno).
Familiarity with Kubernetes security tools (Falco, Kubescape, kube-bench).
Experience with Infrastructure as Code (Terraform, Ansible).
Knowledge of the SLSA framework and software supply chain security practices.
Experience with automated dependency updates and vulnerability remediation (Renovate, Dependabot).
Benefits
At Gcore , we want you to do your best work and enjoy the journey. Our benefits are designed to support your growth, well-being, and life beyond work:
Competitive compensation
Flexible working hours and hybrid or remote options, depending on your role
Work from anywhere in the world for up to 45 days per year
Private medical insurance for you and your family*
Extra paid vacation and sick leave days*
Support for life’s important moments and celebrations
Language courses to help you connect and grow
Modern, welcoming offices with snacks, drinks, and entertainment*
Team sports and social activities*
Benefits may vary depending on your location.
Equal Opportunity Employer
We provide equal opportunity to all applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity, gender expression, national origin, disability, or any other legally protected characteristics.
This position is available only under an employment (labor) agreement.
The world’s digital experiences run on something invisible: the infrastructure and software that keep them fast, reliable, and secure. At Gcore , you’ll help design and deliver that foundation for an AI-driven world.
We’re a global provider of infrastructure and software solutions for AI, cloud, network, and security, powering everything from real-time communication and streaming to enterprise AI and secure web applications. With 210+ edge locations, 50+ cloud regions, and thousands of GPUs , your work here can reach users and businesses across the globe.
You’ll collaborate with leading technology partners such as Intel, NVIDIA, Dell, and Equinix , and work on platforms that power digital products used around the world. Our vision is simple: to connect the world to AI, anywhere, anytime.
Want to work on technology that goes beyond a single product or industry? Join a global team of 550+ professionals building infrastructure and software that supports the entire digital ecosystem.
We are looking for a talented DevOps/SRE Engineer to join our AI Inference Operations Team.