Note: The job is a remote job and is open to candidates in USA. vCluster Labs builds infrastructure software, including Kubernetes-based tenant isolation and AI infrastructure platforms. The Engineering Tech Lead (Product Security) will secure its products through penetration testing, vulnerability response, threat modeling, security-sensitive design reviews, and improved security practices across engineering.
Responsibilities
- Penetration testing: Test our products and infrastructure for exploitable weaknesses, with a focus on Kubernetes and container isolation
- Owning vulnerability response: Triage, prioritize, and fix security issues in our code and dependencies through to a patched release
- Threat modeling new features: Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves
- Code and design reviews: Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team
- Improving security practices across engineering: Help engineers build secure defaults into the product
Skills
- Hands-on penetration testing: Experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise
- Kubernetes attack surface knowledge: Hands-on experience with container breakout, privilege escalation, RBAC, and policy best practices
- Kubernetes internals depth: Working knowledge of the API server, admission control, RBAC, controllers, and the kubelet
- Threat modeling and secure design: Experience threat modeling and reviewing designs for production systems, and explaining risk clearly to other engineers
- Vulnerability ownership: Experience investigating and fixing vulnerabilities in code you work on, including the CVE lifecycle, coordinated disclosure, and patch releases
- Production engineering in Go: Experience building and shipping production systems with Go as a primary language
- CKS certification: Certified Kubernetes Security Specialist
- Startup Experience: Experience at an early-stage organization where you function autonomously and strive towards building something great
Benefits
- Equity
- Bonus
- Health, dental, vision, and life insurance, including plans for you and eligible dependents (benefits vary depending on country).
- Flexible working schedule
- Workplace flexibility
Company Overview
Company H1B Sponsorship