Security Engineer Kubernetes

You will assess Kubernetes environments for exploitable risks, remediate privilege and configuration issues, and build security automation. You will strengthen identity, secrets, network, and supply-chain controls, review elevated changes, and partner with platform teams through rollout.

Responsibilities

• Secure nodes, clusters, pods, roles, tokens, secrets, service communication, and the supply chain
• Find and remediate overprivileged permissions, dangerous workload settings, and escalation paths
• Assess the platform for container and pod breakout, privilege escalation, and workload movement
• Design and build security tooling and automation
• Strengthen identity and secrets handling
• Improve supply-chain security through base images and continuous scanning
• Review changes affecting RBAC, operators, ServiceAccounts, network policies, and elevated privileges
• Partner with platform and product teams through rollout
• Contribute to fleet-wide hardening, policy enforcement, and safer defaults

Requirements

• 3+ years in platform security, Kubernetes security, or offensive security against production infrastructure
• Deep knowledge of pod and workload security, including privileged containers, capabilities, namespaces, mounts, service accounts, RBAC, admission control, and network isolation
• Knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access
• Experience with operators, custom resources, Helm, and GitOps
• Ability to build or modify security tooling in Go, Python, or Rust
• Open to working from Palo Alto, Austin, Washington, DC, or New York offices

Benefits

• Equity
• Medical coverage
• Vision coverage
• Dental coverage
• 401(k) retirement plan
• Short-term disability insurance
• Long-term disability insurance
• Life insurance
• Discounts and perks