Kubernetes
vCluster Labs is looking for an Engineering Tech Lead focused on Product Security to help us build secure infrastructure software from the ground up. You'll bring hands-on penetration testing and deep Kubernetes expertise to our products, while reviewing security-sensitive designs, threat modeling new features, investigating vulnerabilities, and helping teams make sound security decisions as the platform evolves.
As an Engineering Tech Lead (Product Security), your role will include:
- Penetration testing: Test our products and infrastructure for exploitable weaknesses, with a focus on Kubernetes and container isolation.
- Owning vulnerability response: Triage, prioritize, and fix security issues in our code and dependencies through to a patched release.
- Threat modeling new features: Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves.
- Code and design reviews: Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team.
- Improving security practices across engineering: Help engineers build secure defaults into the product.
This role could be a fit for you if you bring:
- Hands-on penetration testing: Experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise.
- Kubernetes attack surface knowledge: Hands-on experience with container breakout, privilege escalation, RBAC, and policy best practices.
- Kubernetes internals depth: Working knowledge of the API server, admission control, RBAC