[All remote jobs](https://jobicy.com/jobs.md)[![Domino Data Lab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/2b7332248704-221.webp)](https://jobicy.com/company/domino-data-lab.md)[Domino Data Lab](https://jobicy.com/company/domino-data-lab.md) # Senior Software Engineer, Patch Engineering & Vulnerability Remediation AI Summary This senior engineering role builds secure release infrastructure and automation for software deployed in regulated and air-gapped customer environments. The engineer will own hardened container-image pipelines, vulnerability triage workflows, and remediation practices. Core work includes reproducible builds, SBOM and VEX generation, scanner evaluation, and patching upstream dependencies using Go or Python. The position has substantial technical ownership and requires clear evidence-based communication with auditors and customer security teams.[Apply for this job](#job-application)[View company](https://jobicy.com/company/domino-data-lab.md)ShareRemote from[Argentina](https://jobicy.com/job-region/argentina.md)SalaryUndisclosedDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished13 Nov 2026Apply before13 Dec 2026Listing views47Application actions4Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. Who we are At Domino, we build solutions that help the largest, highly regulated organizations adopt AI to accelerate mission-critical use cases. Our platform integrates a streamlined model and app development environment, advanced model, agent, and app hosting capabilities, and novel governance capabilities providing regulator-ready AI at scale. Our customers — like Johnson & Johnson, GSK, Bristol Myers, UBS, FINRA and the US Navy — are using our software to solve some of the most important challenges in the world, such as developing new medicines, securing our financial markets, or protecting our country. Backed by Sequoia Capital, Coatue Management, NVIDIA, Snowflake and other leading investors, we have been in business for over a decade but are still a small team operating with the spirit of a startup. In the world of AI today, we believe that the future is still being invented — and we want to be the ones building it. For more information, visit [www.domino.ai](http://www.domino.ai) What we are building The Release Engineering & Vulnerability Remediation team is building the infrastructure and automation that lets Domino ship hardened, auditable software to our most security-sensitive customers—federal agencies, financial institutions, and healthcare organizations operating in regulated or air-gapped environments. Concretely, we are building: * A hardened release pipeline that produces container images meeting strict scan thresholds, with reproducible builds and minimal attack surface * An automated vulnerability triage system that ingests scanner output, deduplicates findings across images and releases, routes to owners, and tracks SLA compliance—without manual triage * Provenance and exploitability tooling that generates SBOMs and VEX statements on every release, so customer security questions are answered from standing artifacts rather than one-off investigations * A scalable remediation practice that uses AI and automation to keep pace with the volume of findings, rather than throwing engineers at each CVE individually This is foundational work. The tooling and runbooks you build will define how Domino operates in regulated markets for years to come. What your impact will be In your first year, you will * In your first year, you will own the hardened image pipeline for our most demanding deployments and cut time-to-remediate for critical and high findings to a published, defensible SLA. * You will replace one-off vulnerability firefighting with an automated path from scan to fix, including SBOM and exploitability statements generated on every release. * You will make “we are not fixing this, and here is why” a documented engineering position backed by evidence, rather than a conversation repeated with every customer. * You will set the technical direction and tooling that the next engineers on this team build on. What we look for in this role * Experience shipping and maintaining software or container images into regulated, on-premises, or air-gapped environments where you cannot simply redeploy to fix a problem * Deep fluency with container build systems, base image strategy, and reproducible builds, plus working knowledge of Kubernetes and Helm packaging * Hands-on experience with vulnerability scanning and provenance tooling, and the judgment to distinguish a real risk from scanner noise * Go and/or Python strong enough to build automation and to patch upstream open-source dependencies when no fix exists * Clear technical writing. You will produce evidence that external auditors and customer security teams read and act on * A bias toward removing whole classes of problems rather than closing tickets What we value * We value a growth mindset. High-performing creative individuals who dig into problems and see the opportunities for success * We believe in individuals who seek truth and speak the truth and can be their whole selves at work * We value all of you that believe improving is always possible At Domino Everything is a work in progress – we can do better at everything * We emphasize an environment of teaching and learning to equip employees with the tools needed to be successful in their function and the company * We strongly believe in the value of growing a diverse team and encourage people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply #LI-Remote Show more [Apply now >](https://jobicy.com/jobs/161935-senior-software-engineer-patch-engineering-vulnerability-remediation.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThe role combines senior software engineering with DevSecOps, supply-chain security, and regulated deployment constraints. It requires sound judgment about exploitability, durable automation design, and independently setting technical direction. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$95,000US market range (per year)$75k–$125k0$137.50k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer compensation was disclosed. The annual figures are estimated USD market compensation for a senior remote security and release-engineering specialist in Argentina and are not employer-provided pay. ## Core skills Skills and capabilities most closely associated with this opportunity. [Container security](https://jobicy.com/jobs?search_keywords=Container%20security.md)[Vulnerability remediation](https://jobicy.com/jobs?search_keywords=Vulnerability%20remediation.md)[Release engineering](https://jobicy.com/jobs?search_keywords=Release%20engineering.md)[DevSecOps](https://jobicy.com/jobs?search_keywords=DevSecOps.md)[Kubernetes](https://jobicy.com/jobs?search_keywords=Kubernetes.md)[Helm](https://jobicy.com/jobs?search_keywords=Helm.md)[Docker](https://jobicy.com/jobs?search_keywords=Docker.md)[Reproducible builds](https://jobicy.com/jobs?search_keywords=Reproducible%20builds.md)[SBOM](https://jobicy.com/jobs?search_keywords=SBOM.md)[VEX](https://jobicy.com/jobs?search_keywords=VEX.md)[Go](https://jobicy.com/jobs?search_keywords=Go.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[Vulnerability scanning](https://jobicy.com/jobs?search_keywords=Vulnerability%20scanning.md)[Software supply chain security](https://jobicy.com/jobs?search_keywords=Software%20supply%20chain%20security.md)[Technical writing](https://jobicy.com/jobs?search_keywords=Technical%20writing.md) Sample interview questionsHow would you design an automated path from a container vulnerability finding to a verified fix?I would ingest and normalize scanner findings, deduplicate them by package, image, and release, then enrich them with severity, reachability, exploitability, and ownership data. The workflow should create prioritized remediation work, verify rebuilt images through scanning and policy gates, and retain evidence linking the finding, decision, fix, and release. What factors would you use to decide that a reported CVE does not require remediation? I would review whether the affected package is present, whether the vulnerable code path is reachable, the deployed configuration, available mitigations, and the reliability of the scanner data. Any non-remediation decision should be time-bound where appropriate and documented in a VEX-style statement with evidence and a review owner. How do reproducible builds improve security in regulated environments? Reproducible builds make it possible to verify that an artifact corresponds to known source code and declared dependencies rather than an uncontrolled build environment. They reduce supply-chain uncertainty, support audits, and make it easier to investigate or recreate a released image when a vulnerability is discovered. Describe how you would reduce vulnerability remediation backlog without simply adding more engineers. I would first identify recurring root causes such as stale base images, unowned dependencies, noisy scanner rules, or manual handoffs. Then I would automate base-image updates, ownership routing, policy-driven prioritization, and evidence generation, while using dependency and exploitability data to focus effort on meaningful risk. How would you communicate a security remediation decision to an external auditor or customer security team? I would provide a concise statement of the finding, affected artifacts, severity context, exploitability assessment, mitigation or fix status, and supporting evidence. The documentation should be reproducible, traceable to a specific release, and written clearly enough that the reader can understand both the technical rationale and the accountable decision. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![ANGI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/09/50cccf084c34089de2274f72e18841d0.jpg) ANGI Nov 13 New ### [Senior Security Engineer, Detection & Response](https://jobicy.com/jobs/161962-senior-security-engineer-detection-response.md) For over 30 years, Angi has powered the future of the home services industry, creating an environment where homeowners and pros benefit from more jobs done well. For homeowners, our… * ![ANGI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/09/50cccf084c34089de2274f72e18841d0.jpg) ANGI Nov 13 New ### [Senior Security Engineer, Application Security](https://jobicy.com/jobs/161957-senior-security-engineer-application-security.md) For over 30 years, Angi has powered the future of the home services industry, creating an environment where homeowners and pros benefit from more jobs done well. For homeowners, our… * ![Domino Data Lab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/2b7332248704-221.webp) Domino Data Lab Nov 13 New ### [Staff Software Engineer, Identity and Authorization](https://jobicy.com/jobs/161940-staff-software-engineer-identity-and-authorization.md) Who we are At Domino, we build solutions that help the largest, highly regulated organizations adopt AI to accelerate mission-critical use cases. Our platform integrates a streamlined model and app… * ![Rackner logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/05f1f6baeea0-221.webp) Rackner Nov 13 New ### [Application Security Engineer — Secure Mission Systems](https://jobicy.com/jobs/161922-application-security-engineer-secure-mission-systems.md) Application Security Engineer — Secure Mission Systems Location: Mainly remote, with onsite work in Laurel, Maryland, typically one day approximately every six weeks for team-wide sprint planningClearance: Active final DoD… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Nov 13 New ### [Global Investigator – National Security](https://jobicy.com/jobs/161913-global-investigator-national-security.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![UpGuard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/474a12c7-221.png) UpGuard Nov 13 New ### [Staff Security Engineer (Product & Cloud)](https://jobicy.com/jobs/161789-staff-security-engineer-product-cloud.md) Who are we? At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk… * ![TITAN logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/81b82aeb-221.png) TITAN Nov 13 New ### [Chief Information Security Officer (CISO), RFA](https://jobicy.com/jobs/161782-chief-information-security-officer-ciso-rfa.md) About RFA and Titan RFA is a leading IT and cybersecurity partner to financial services firms: hedge funds, private equity, asset managers, and the firms that serve them. RFA is… * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Nov 13 New ### [Detection & Response Engineer](https://jobicy.com/jobs/161755-detection-response-engineer-2.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![Canonical logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png) Canonical Nov 12 New ### [Linux Cryptography and Security Engineer](https://jobicy.com/jobs/161678-linux-cryptography-and-security-engineer.md) This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and… * ![Latent logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/c872d1ae22b7-221.webp) Latent Nov 12 New ### [Security Engineer](https://jobicy.com/jobs/161597-security-engineer-7.md) About Latent Latent is the enterprise pharmacy intelligence platform, powered by a clinical agentic engine, that enables health systems to grow their pharmacy operations and serve more patients. One engine… [Browse all jobs](https://jobicy.com/jobs.md)