Security Engineer, Kubernetes

📋 Description

• Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service
• Find and remediate overprivileged permissions, dangerous pod and workload settings, and escalation
• Assess our own platform the way an adversary would, including container and pod breakout, privilege
• Design and build security tooling and automation, including AI-assisted analysis, that catches
• Strengthen identity and secrets handling so workloads receive only the access they need
• Improve supply-chain security through secure base images, continuous scanning, and related controls

🎯 Requirements

• 3+ years in platform security, Kubernetes security, or offensive security against production
• Deep knowledge of pod and workload security: privileged containers, capabilities, host namespaces
• Working knowledge of identity, secrets, workload identity, service-to-service trust, supply chain
• Able to think like an attacker, measure blast radius, and turn the path into a detection, control
• Comfortable with operators, custom resources, Helm, and GitOps workflows
• Able to build or modify security tooling in Go, Python, or Rust when a control needs automation

🎁 Benefits

• Equity
• Comprehensive medical, vision, and dental coverage
• Access to a 401(k) retirement plan
• Short & long-term disability insurance
• Life insurance
• Various other discounts and perks