Engineering Tech Lead, Product Security (Kubernetes)

vCluster Labs; Oregon; Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive Salary

Premium Insurance

Flexible Working Schedule

Workplace Flexibility

Job summary

vCluster Labs seeks an Engineering Tech Lead focused on Product Security to build secure infrastructure software. You’ll conduct hands-on penetration testing, review security-sensitive designs, and guide teams on secure defaults as the platform scales.

You’ll own vulnerability response, perform threat modeling for new features, and participate in code and design reviews with the engineering team, strengthening security across the stack.

Qualifications

• Hands-on security testing experience.
• Kubernetes security expertise.
• Threat modeling for production systems.
• Experience reviewing code and designs for security.
• Vulnerability management across code and dependencies.
• Production Go engineering experience.

Responsibilities

• Penetration testing: Test our products and infrastructure for exploitable weaknesses, with a focus on Kubernetes and container isolation.
• Owning vulnerability response: Triage, prioritize, and fix security issues in our code and dependencies through to a patched release.
• Threat modeling new features: Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves.
• Code and design reviews: Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team.
• Improving security practices across engineering: Help engineers build secure defaults into the product.

Skills

Penetration testing

Kubernetes

Threat modeling

Code reviews

Security best practices

Vulnerability management

Go production engineering

Tools

Controller-runtime

Kubebuilder

client-go

Job description

vCluster Labs seeks an Engineering Tech Lead focused on Product Security to build secure infrastructure software. You’ll conduct hands-on penetration testing, review security-sensitive designs, and guide teams on secure defaults as the platform scales.

You’ll own vulnerability response, perform threat modeling for new features, and participate in code and design reviews with the engineering team, strengthening security across the stack.