Kubernetes Security Engineer: Build Safe, Scalable Platforms

VulnU; Palo Alto, Austin, New York, Washington (CA, TX, NY, District of Columbia); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Flexible PTO

Job summary

SpaceXSI is seeking a Security Engineer to secure the Kubernetes-based platform behind X and SpaceXSI’s infrastructure, products, and workloads. You will pursue defense-in-depth, build automated tooling, and enforce least privilege at fleet scale.

You will assess security risk like an attacker, design controls, and collaborate with cross-functional teams to implement robust protection across clusters, identities, and supply chains.

Qualifications

• 3+ years in platform security, Kubernetes security, or offensive security against production infrastructure.
• Deep knowledge of pod and workload security: privileged containers, capabilities, host namespaces, host path mounts, service accounts, RBAC, admission control, and network isolation.
• Working knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access.

Responsibilities

• Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service communication, and the supply chain.
• Find and remediate overprivileged permissions and dangerous pod settings across operators, admission, networking, identity, and monitoring.
• Design and build security tooling and automation, including AI-assisted analysis, that catches risky configuration and overprivilege.
• Strengthen identity and secrets handling so workloads receive only the access they need.
• Improve supply-chain security through secure base images, continuous scanning, and related controls.
• Review changes that affect RBAC, operators, ServiceAccounts, network policies, and anything running with elevated privileges.

Skills

Kubernetes security

Pod security

RBAC

Identity & secrets management

Threat modeling

Go Python Rust

Tools

Go

Python

Rust

Helm

GitOps

Job description

SpaceXSI is seeking a Security Engineer to secure the Kubernetes-based platform behind X and SpaceXSI’s infrastructure, products, and workloads. You will pursue defense-in-depth, build automated tooling, and enforce least privilege at fleet scale.

You will assess security risk like an attacker, design controls, and collaborate with cross-functional teams to implement robust protection across clusters, identities, and supply chains.