Remote
Engineering Tech Lead (Product Security)
About this role
vCluster Labs is looking for an Engineering Tech Lead focused on Product Security to help us build secure infrastructure software from the ground up. You'll bring hands-on penetration testing and deep Kubernetes expertise to our products, while reviewing security-sensitive designs, threat modeling new features, investigating vulnerabilities, and helping teams make sound security decisions as the platform evolves. As an Engineering Tech Lead (Product Security), your role will include: - Penetration testing: Test our products and infrastructure for exploitable weaknesses, with a focus on Kubernetes and container isolation.
- Owning vulnerability response: Triage, prioritize, and fix security issues in our code and dependencies through to a patched release. - Threat modeling new features: Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves. - Code and design reviews: Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team.
- Improving security practices across engineering: Help engineers build secure defaults into the product. This role could be a fit for you if you bring: - Hands-on penetration testing: Experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise. - Kubernetes attack surface knowledge: Hands-on experience with container breakout, privilege escalation, RBAC, and policy best practices.
- Kubernetes internals depth: Working knowledge of the API server, admission control, RBAC, controllers, and the kubelet, ideally from building controllers or operators with controller-runtime, Kubebuilder, or client-go. - Threat modeling and secure design: Experience threat modeling and reviewing designs for production systems, and explaining risk clearly to other engineers. - Vulnerability ownership: Experience investigating and fixing vulnerabilities in code you work on, including the CVE lifecycle, coordinated disclosure, and patch releases.
- Production engineering in Go: Experience building and shipping production systems with Go as a primary language. Bonus points for: - CKS certification: Certified Kubernetes Security Specialist. - Startup Experience: Experience at an early-stage organization where you function autonomously and strive towards building something great. ABOUT VCLUSTER LABS We're the #1 platform for AI infrastructure, trusted by the world's fastest-growing AI cloud builders.