[Remote] Engineering Tech Lead (Product Security)

Note: The job is a remote job and is open to candidates in USA. vCluster Labs builds infrastructure software, including Kubernetes-based tenant isolation and AI infrastructure platforms. The Engineering Tech Lead (Product Security) will secure its products through penetration testing, vulnerability response, threat modeling, security-sensitive design reviews, and improved security practices across engineering.

Responsibilities

• Penetration testing: Test our products and infrastructure for exploitable weaknesses, with a focus on Kubernetes and container isolation
• Owning vulnerability response: Triage, prioritize, and fix security issues in our code and dependencies through to a patched release
• Threat modeling new features: Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves
• Code and design reviews: Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team
• Improving security practices across engineering: Help engineers build secure defaults into the product

Skills

• Hands-on penetration testing: Experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise
• Kubernetes attack surface knowledge: Hands-on experience with container breakout, privilege escalation, RBAC, and policy best practices
• Kubernetes internals depth: Working knowledge of the API server, admission control, RBAC, controllers, and the kubelet
• Threat modeling and secure design: Experience threat modeling and reviewing designs for production systems, and explaining risk clearly to other engineers
• Vulnerability ownership: Experience investigating and fixing vulnerabilities in code you work on, including the CVE lifecycle, coordinated disclosure, and patch releases
• Production engineering in Go: Experience building and shipping production systems with Go as a primary language
• CKS certification: Certified Kubernetes Security Specialist
• Startup Experience: Experience at an early-stage organization where you function autonomously and strive towards building something great

Benefits

• Equity
• Bonus
• Health, dental, vision, and life insurance, including plans for you and eligible dependents (benefits vary depending on country).
• Flexible working schedule
• Workplace flexibility

Company Overview

Company H1B Sponsorship