Engineering Tech Lead (Product Security)

vclusterlabs; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Equity

Health insurance

Dental insurance

Vision insurance

Life insurance

Job summary

vclusterlabs is seeking a hands-on Product Security Leader to guide security for our Kubernetes-centric infrastructure software. You will test products for weaknesses, guide secure design as features evolve, and own vulnerability response through remediation and release, blending security research with close collaboration across engineering.

Responsibilities include penetration testing Kubernetes environments, triaging and patching vulnerabilities, threat-modeling features, and participating in

Qualifications

• Practical penetration testing experience in production systems.
• Deep knowledge of Kubernetes attack surfaces (breakout, privilege escalation, RBAC, policy controls).
• Understanding of Kubernetes internals (API server, admission controllers, controllers, kubelet).
• Experience threat modeling production systems and reviewing designs for security risks.
• Experience owning vulnerability remediation and CVE processes and patch releases.
• Experience shipping production software with Go.

Responsibilities

• Penetration test products and infrastructure, focusing on Kubernetes environments and container isolation.
• Triage, prioritize, investigate, and help fix vulnerabilities in production releases.
• Threat model proposed features and review security-sensitive designs early in development.
• Participate in code reviews, design reviews, and technical discussions, explaining security risks to engineers.
• Help engineering teams adopt secure defaults and improve day-to-day security practices.

Skills

Penetration testing

Kubernetes security

Threat modeling

Remediation & disclosure

Go development

Code review security

Tools

Kubebuilder

controller-runtime

client-go

Job description

Role overview

Provide hands-on product security leadership for infrastructure software built around Kubernetes. You will test products for weaknesses, guide secure design as features evolve, and own vulnerability response through remediation and release. The work blends practical security research with close collaboration across engineering.

Responsibilities

• Penetration test products and infrastructure, focusing on Kubernetes environments and container isolation.
• Triage, prioritize, investigate, and help fix vulnerabilities in application code and dependencies through patched releases.
• Threat model proposed features and review security-sensitive designs early in development.
• Participate in code reviews, design reviews, and technical discussions, explaining security risks clearly to engineers.
• Help engineering teams adopt secure defaults and improve day-to-day security practices.

Requirements

• Practical penetration testing experience, including finding and exploiting vulnerabilities in production systems.
• Deep knowledge of Kubernetes attack surfaces, including container breakout, privilege escalation, RBAC, and policy controls.
• Working understanding of Kubernetes internals such as the API server, admission control, controllers, and kubelet.
• Experience threat modeling production systems and reviewing designs for security risks.
• Experience owning vulnerability remediation and disclosure, including CVE processes and patch releases.
• Experience building and shipping production software with Go.

Nice to have

• Certified Kubernetes Security Specialist credential.
• Experience working autonomously in an early-stage organization.
• Experience building Kubernetes controllers or operators with controller-runtime, Kubebuilder, or client-go.

Benefits and work setup

• Remote work with flexible location and schedule; benefit details may vary by country.
• Compensation includes equity, with health, dental, vision, and life insurance for employees and eligible dependents.