vclusterlabs · Remote
Skills: Docker
vCluster Labs is looking for an Engineering Tech Lead focused on Product Security to help us build secure infrastructure software from the ground up. You'll bring hands-on penetration testing and deep Kubernetes expertise to our products, while reviewing security-sensitive designs, threat modeling new features, investigating vulnerabilities, and helping teams make sound security decisions as the platform evolves. As an Engineering Tech Lead (Product Security), your role will include: - Penetration testing: Test our products and infrastructure for exploitable weaknesses, with a focus on Kubernetes and container isolation. - Owning vulnerability response: Triage, prioritize, and fix security issues in our code and dependencies through to a patched release. - Threat modeling new features: Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves. - Code and design reviews: Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team. - Improving security practices across engineering: Help engineers build secure defaults into the product. This role could be a fit for you if you bring: - Hands-on penetration testing: Experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise. - Kubernetes attack surface knowledge: Hands-on experience with container breakout, privilege escalation, RBAC, and policy best practices. - Kubernetes internals depth: Working knowledge of the API server, admission control, RBAC, controllers, and the kubelet, ideally from building controllers or operators with controller-runtime, Kubebuilder, or client-go. - Threat modeling and secure design: Experience threat modeling and reviewing designs for production systems, and explaining risk clearly to other engineers. - Vulnerability ownership: Experience investigating and fixing vulnerabilities in code you work on, including the CVE lifecycle, co…
Sign in to see the original posting
Browse more developer jobs on RoleBurst