Senior Security Engineer

Role overview A hands-on senior security engineering role embedded with client cloud and Kubernetes environments to make them measurably more secure. The work spans vulnerability management, detection engineering, pipeline security, and emerging AI-specific risks. The position suits someone who enjoys direct technical execution while partnering closely with client engineering teams.

Responsibilities - Identify, prioritize, and drive remediation of vulnerabilities across cloud infrastructure and Kubernetes clusters. - Build and tune detection rules and response playbooks for security-relevant events. - Harden CI/CD pipelines through controls such as secret scanning, dependency checks, and policy gates. - Conduct security assessments and threat modeling for client workloads, including AI systems. - Document findings clearly and work side by side with engineering teams to implement fixes. - Stay current on emerging threats, especially those affecting AI and ML systems.

Requirements - Several years of hands-on security engineering experience, ideally in cloud-native environments. - Working knowledge of Kubernetes security concepts such as RBAC, pod security standards, and network policies. - Familiarity with vulnerability management tooling and triage workflows. - Experience with at least one cloud provider's security services and IAM model. - Practical scripting or development skills in Python, Go, or a similar language. - Understanding of secure software delivery and supply-chain risks.

Nice to have - Exposure to AI or ML security topics such as model theft, adversarial inputs, or data poisoning. - Experience with policy-as-code tools like OPA or Kyverno.