Full-Time

Senior Software Engineer

Platform

Stacklok

Stacklok

11-50 employees

Provides software supply chain security tools

Compensation Overview

$189k - $231k/yr

+ Equity

Remote in USA

Remote

Must work core hours in the U.S. Eastern Time zone.

Category
Software Engineering (1)
Required Skills
Kubernetes
Computer Networking
Docker
Go
Observability

Get referred to Stacklok

See people who can refer or advise you

Requirements
  • Deep proficiency in Go, with a proven track record building production-grade backend or platform systems
  • Knowledge of Kubernetes and container technologies, including operators, isolation, and networking in production environments
  • Proven track record designing and shipping complete systems end to end, from architecture through production and iteration
  • Demonstrated experience as a tech lead: mentoring engineers, driving code review, and raising the quality of a team's work
  • Experience designing for reliability and observability, building systems with monitoring, testing, and evaluation in mind
  • Proven track record building or operating platform services such as gateways, registries, runtimes, or deployment tooling. Familiarity with MCP is a plus
  • AI-first mindset: integrates AI tools into development and helps improve how the team ships, turning AI-assisted workflows into repeatable velocity gains
  • Communication: excellent written and verbal communication, able to explain complex technical ideas clearly to technical and non-technical audiences
  • Startup mentality and intrinsic motivation: self-directed and hands-on, thrives in fast-moving, ambiguous environments and drives clarity through action
Responsibilities
  • Own the design and implementation of platform subsystems end to end, from technical design through production and ongoing improvement
  • Anchor meaningful projects, making the design tradeoffs that balance reliability, scalability, and time to market
  • Write production-ready code aligned with the overall system architecture, with observability, testing, and error handling built in
  • Produce clear design docs and work breakdowns that the team can plan and build against
  • Mentor SWE and SWE II engineers and contribute to a strong code review culture across the team
  • Contribute to technical decisions alongside technical leads, product, and engineering leadership on behalf of the team
  • Contribute to the open source ToolHive codebase and collaborate with community contributors on shared work

Stacklok provides Trusty, a free web app and VS Code extension for software supply chain security. It analyzes public GitHub activity to generate a Trusty Score that helps gauge repository trustworthiness and uses Sigstore for Package Provenance to verify package authenticity. It also offers AI-powered Package Recommendations to suggest safer dependencies and continuously checks that packages are signed. The goal is to help developers and open-source communities make safer dependency choices and improve the integrity of software.

Company Size

11-50

Company Stage

Series A

Total Funding

$17.5M

Headquarters

Seattle, Washington

Founded

2023

Get referred to Stacklok

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • June 13, 2026 podcast coverage signals continued founder visibility and recruiting leverage.
  • March 18, 2026 MCP Optimizer cut per-request tokens 60-85% in vMCP deployments.
  • SUSECON 2026 integrated Stacklok into vetted MCP registries alongside AWS and n8n.

What critics are saying

  • Trusty stayed experimental on January 22, 2025, delaying clear enterprise monetization.
  • Stacklok's product shift from packages to MCP vetting dilutes focus and confuses buyers.
  • If free Trusty and tooling never convert, 2027 funding dries up and Stacklok shrinks.

What makes Stacklok unique

  • Craig McLuckie and Joe Beda pair Kubernetes pedigree with Luke Hinds' sigstore roots.
  • Trusty indexes millions of packages across Go, Java, JavaScript, Rust, and Python.
  • Stacklok now vets MCP servers, extending supply-chain trust into AI agent infrastructure.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Flexible Work Hours

Hybrid Work Options

Growth & Insights and Company News

Headcount

6 month growth

10%

1 year growth

5%

2 year growth

10%
PR Newswire
Mar 20th, 2024
45 New Members Join The Cloud Native Computing Foundation

As the community convenes at KubeCon + CloudNativeCon Europe in Paris, CNCF welcomes continued investment from organizations around the worldPARIS, March 20, 2024 /PRNewswire/ -- KubeCon + CloudNativeCon Europe – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, announced today that 45 new members have joined the Foundation. Together with hundreds of organizations spanning continents and industries, these new members will help drive cloud native innovation to respond to the diverse and pressing challenges organizations face."Every quarter it is inspiring to see the number of diverse organizations who are contributing to and leveraging cloud native technologies, and who endeavor further involvement with the community," said Chris Aniszczyk, CTO of the CNCF. "Without the investment from these forward-thinking companies, we would not be able to achieve what we have thus far in building an incredible ecosystem around Kubernetes, responding to challenges we didn't even know existed when we started in 2015. We look forward to working together with these new members."About the newest Silver Members:8gears Container Registry is a Harbor-based container image management solution provided and operated by the respective project's maintainer and contributors.Container Registry is a Harbor-based container image management solution provided and operated by the respective project's maintainer and contributors. AOE 's Cloud & DevOps expertise enhances your IT through advanced Kubernetes consulting, offering knowledge transfer, training, operations, and implementation services, enabling you to adeptly manage container orchestration and future-proof your business.'s Cloud & DevOps expertise enhances your IT through advanced Kubernetes consulting, offering knowledge transfer, training, operations, and implementation services, enabling you to adeptly manage container orchestration and future-proof your business. Apollo GraphQL is the maker of Apollo GraphOS , a platform that enables API platform teams to connect their APIs and deliver a self-service graph that can power any number of applications.is the maker of , a platform that enables API platform teams to connect their APIs and deliver a self-service graph that can power any number of applications

Stacklok
Jan 23rd, 2024
Get to know Shanis Windland, Stacklok's new Chief Operating Officer

Shanis Windland joined Stacklok's leadership team in January 2024 as its Chief Operating Officer.

Stacklok
Nov 15th, 2023
How to use Trusty in Visual Studio Code to flag risky open source libraries

Last week, Stacklok announced the launch of Trusty, a free-to-use service that helps developers make safer dependency choices.

FinSMEs
May 19th, 2023
Stacklok Raises $17.5M in Series A Funding

Stacklok, a Seattle, WA-based provider of open-source software supply chain security solutions, raised $17.5M in Series A funding.

Business Wire
May 18th, 2023
Stacklok Announces $17.5 million Series A To Secure the Supply Chain of Software Deployment

Stacklok announces $17.5 million Series A to Secure the Software Supply Chain; Madrona and Accel back Open-Source Visionaries