Engineering Tech Lead (Product Security)

Role overview Provide hands-on product security leadership for infrastructure software built around Kubernetes. You will test products for weaknesses, guide secure design as features evolve, and own vulnerability response through remediation and release. The work blends practical security research with close collaboration across engineering.

Responsibilities - Penetration test products and infrastructure, focusing on Kubernetes environments and container isolation. - Triage, prioritize, investigate, and help fix vulnerabilities in application code and dependencies through patched releases. - Threat model proposed features and review security-sensitive designs early in development. - Participate in code reviews, design reviews, and technical discussions, explaining security risks clearly to engineers. - Help engineering teams adopt secure defaults and improve day-to-day security practices.

Requirements - Practical penetration testing experience, including finding and exploiting vulnerabilities in production systems. - Deep knowledge of Kubernetes attack surfaces, including container breakout, privilege escalation, RBAC, and policy controls. - Working understanding of Kubernetes internals such as the API server, admission control, controllers, and kubelet. - Experience threat modeling production systems and reviewing designs for security risks. - Experience owning vulnerability remediation and disclosure, including CVE processes and patch releases. - Experience building and shipping production software with Go.

Nice to have - Certified Kubernetes Security Specialist credential. - Experience working autonomously in an early-stage organization. - Experience building Kubernetes controllers or operators with controller-runtime, Kubebuilder, or client-go.

Benefits and work setup - Remote work with flexible location and schedule; benefit details may vary by country. - Compensation includes equity, with health, dental, vision, and life insurance for employees and eligible dependents.