Engineering Tech Lead (Product Security)

The role

You will build secure infrastructure software by performing penetration testing and threat modeling. You will also manage vulnerability responses and review security-sensitive designs as the platform evolves.

What you will do

• Test products and infrastructure for exploitable weaknesses with a focus on Kubernetes and container isolation.
• Triage, prioritize, and fix security issues in code and dependencies through to a patched release.
• Review security-sensitive designs early to identify risks.
• Participate in code reviews, design reviews, and technical discussions.
• Help engineers build secure defaults into the product.

Required qualifications

• Hands-on penetration testing experience finding and exploiting vulnerabilities in production systems.
• Deep Kubernetes expertise.
• Hands-on experience with container breakout, privilege escalation, RBAC, and policy best practices.
• Working knowledge of the API server, admission control, RBAC, controllers, and the kubelet.
• Experience threat modeling and reviewing designs for production systems.
• Experience investigating and fixing vulnerabilities in code, including the CVE lifecycle, coordinated disclosure, and patch releases.
• Experience building and shipping production systems with Go as a primary language.

Nice to have

• CKS certification: Certified Kubernetes Security Specialist.
• Startup Experience: Experience at an early-stage organization where you function autonomously.

Benefits

• Competitive Salary including equity.
• Premium Insurance: Health, dental, vision, and life Insurance.
• Flexible Working Schedule.
• Workplace Flexibility.

About the company

vCluster Labs is a venture-backed startup and the #1 platform for AI infrastructure. They are the company behind vCluster, an open source technology for tenant isolation on Kubernetes.