150K–200K USD / year
Engineering Tech Lead (Product Security)
DevOpsRemote — worldwide
Published on 2026-10-20
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Lead product security efforts for Kubernetes infrastructure software, combining hands-on penetration testing with secure design reviews and vulnerability response. Partner with engineers to identify risks and build secure defaults into the platform.
About the company
vCluster Labs builds virtual Kubernetes clusters that let platform teams create isolated environments on top of shared clusters for engineering and AI workloads.
Stack
KubernetesGocontroller-runtimeKubebuilderclient-go
What you'll do
- Penetration test products and infrastructure, especially Kubernetes and container isolation.
- Triage, prioritize, and resolve vulnerabilities through patched releases.
- Threat model new features and review security-sensitive designs.
- Participate in code reviews, design reviews, and technical discussions.
- Help engineering teams build secure defaults into the product.
What we're looking for
- Hands-on penetration testing and experience exploiting vulnerabilities in production systems.
- Deep Kubernetes security knowledge, including container breakout, privilege escalation, RBAC, and policy.
- Knowledge of Kubernetes internals, including the API server, admission control, controllers, and kubelet.
- Experience threat modeling production systems and clearly explaining security risks.
- Experience owning vulnerability fixes, CVEs, coordinated disclosure, and patch releases.
- Production engineering experience with Go.
Nice to have
- Certified Kubernetes Security Specialist (CKS).
- Experience working autonomously at an early-stage startup.
Benefits
- Equity and bonus.
- Health, dental, vision, and life insurance, with dependent coverage options.
- Flexible working schedule and workplace location.