Kubernetes Security Engineer
Summary
A cybersecurity engineer securing cloud and on-premises Kubernetes infrastructure for a U.S.-based digital financial institution — designing pod-level network microsegmentation, enforcing zero-trust posture, and building AI agents to automate container security workflows. Core stack: Kubernetes (EKS/AKS/GKE), Cilium/Calico/Istio, Falco/Trivy-style tooling, Python/Go, Terraform/Helm.
Salary: ₱150,000 – ₱200,000 per month
About the role
We are seeking a Kubernetes Security & AI Automation Engineer to join our cybersecurity team in supporting a leading U.S.-based digital financial institution. In this high-impact position, you will take ownership of containerized infrastructure security across cloud and on-premises Kubernetes environments. You will design pod-level network microsegmentation, enforce zero-trust posture, and pioneer custom AI agents to automate routine container security workflows at machine speed.
Key responsibilities
Take ownership of containerized infrastructure security across cloud and on-premises Kubernetes environments
Design pod-level network microsegmentation
Enforce zero-trust posture
Pioneer custom AI agents to automate routine container security workflows
Troubleshoot complex distributed network and cluster security issues
About you
3+ years of dedicated experience in Kubernetes security within a production enterprise environment
Deep hands-on experience with Kubernetes NetworkPolicies and CNI/service mesh tools (Cilium, Calico, Istio, Isovalent, or Cisco Secure Workload)
Hands-on experience securing AWS EKS, Azure AKS, or GCP GKE
Experience with container security tools (Aqua, Prisma Cloud, Sysdig, Trivy, Falco)
Proficiency in Python (strongly preferred), Go, or Bash, alongside IaC tools (Terraform, Helm, Kustomize)
Strong troubleshooting skills for complex distributed network and cluster security issues
Hands-on experience developing or integrating AI/LLM-driven security automation (prompt engineering, AI orchestration frameworks, API automation) - preferred
Certified Kubernetes Security Specialist (CKS) certification - preferred
Prior experience in highly regulated financial services environments (PCI-DSS, CIS Benchmarks) - preferred
Experience implementing Service Mesh security (mTLS, identity-based access) - preferred