TuxCare offers a comprehensive portfolio of security solutions for Linux and open-source software designed for enterprise organizations.

With TuxCare, companies can automate vulnerability patching, minimize downtime, maintain security and compliance, and rely on deep expertise in Linux and open-source security.

Our solutions cover widely used Linux distributions, end-of-life systems, open-source software ecosystems, and other critical infrastructure.

Learn more at: https://tuxcare.com/ / https://tuxcare.com/endless-lifecycle-support/

We’re looking for a Software Engineer to join the ELS Delivery Pipeline team within our Endless Lifecycle Support (ELS) product. ELS provides security updates for software versions that are no longer maintained upstream. The delivery pipeline takes reported vulnerabilities through assessment, patching, building, testing, and package publication across supported ecosystems. Our team builds and operates the internal services, tools, and integrations that connect these stages and track work through to release. We automate repetitive tasks and help engineering teams diagnose and recover from pipeline failures.

For this role, it is critical that you have experience owning production systems end to end — from clarifying requirements directly with stakeholders to designing, implementing, deploying, and operating solutions. You will work across existing services and tools, improving reliability, simplifying workflows, and verifying results in production.

Key Responsibilities:

• Build pipelines that publish security advisories from vulnerability assessments and released fixes.
• Automate vulnerability assessment across large inventories of packages, versions, and dependencies across ecosystems.
• Integrate vulnerability discovery scanners, reconcile their findings, and connect results to assessment and patching workflows.
• Build and operate Python services, command-line tools, and internal interfaces for engineers assessing vulnerabilities, tracking patches, and managing releases.
• Work directly with stakeholders to clarify requirements, agree priorities, and define how results will be verified.
• Improve build and deployment automation, monitor production systems, and troubleshoot failures across services, containers, and data stores.
• Review code and improve automated testing, security, and maintainability.
• Use AI coding agents in day-to-day development, reviewing and testing the code they produce.

Must have