Remote-first engineering team building next-generation Kubernetes and AI infrastructure for organizations operating at scale.
Responsibilities
Conduct hands-on penetration testing of products and infrastructure, focusing on Kubernetes environments, container isolation, and cloud-native systems.
Investigate, triage, prioritize, and remediate security vulnerabilities in application code and dependencies, from discovery through patch development, release, and verification.
Review new features and security-sensitive architectural designs early in the development lifecycle, identify attack paths, assess risks, and recommend mitigations.
Analyze Kubernetes attack surfaces, including container breakout risks, privilege escalation, RBAC, admission control, and security policy configurations.
Apply understanding of Kubernetes components (API server, controllers, admission mechanisms, kubelet) to identify weaknesses.
Participate in code reviews, design discussions, and technical reviews.
Embed secure defaults, security checks, and threat-aware development practices into the product lifecycle.
Build, maintain, and improve production-grade software using Go.
Explain vulnerabilities, attack scenarios, and remediation priorities to engineering stakeholders.
Requirements
Hands-on experience conducting penetration tests and exploiting vulnerabilities in production systems.
Deep practical expertise in Kubernetes security: container isolation, container breakout, privilege escalation, RBAC, security policy best practices.
Strong understanding of Kubernetes internals: API server, admission control, controllers, RBAC, kubelet.
Experience building Kubernetes controllers or operators using controller-runtime, Kubebuilder, or client-go.
Experience with threat modeling, secure system design, and reviewing production architectures.
Familiarity with the CVE lifecycle, coordinated vulnerability disclosure, and security patch releases.
Professional experience building and shipping production systems with Go.