Kubernetes Security Engineer — Platform & Tooling

SpaceX Super Intelligence; Austin (TX); Sur place; USD 100 000 - 258 000; Plein temps

Avantages offerts par ce poste

Equity

Medical, vision, and dental coverage

401(k) retirement plan

Disability insurance

Life insurance

Résumé du poste

SpaceXSI is seeking an security-focused platform engineer to safeguard the Kubernetes-based infrastructure and workloads powering the X and SpaceXSI stack. You will identify risks, implement durable fixes, and build tooling that scales with our fleet.

Work includes assessing attacker paths, hardening clusters, and delivering practical controls and automation in Go, Python, or Rust, across a distributed set of environments in the U.S. and beyond.

Qualifications

• 3+ years in platform security, Kubernetes security, or offensive security against production infrastructure.
• Deep knowledge of pod and workload security: privileged containers, capabilities, host namespaces, host path mounts, service accounts, RBAC, admission control, and network isolation.
• Working knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access.
• Able to think like an attacker, measure blast radius, and turn the path into a detection, control, or tool.
• Comfortable with operators, custom resources, Helm, and GitOps workflows.
• Able to build or modify security tooling in Go, Python, or Rust when a control needs automation.
• Bonus: Image scanning, SBOMs, secure base images, policy-as-code (Kyverno, OPA), multi-cluster environments, runtime detection, and security testing of customer-facing application.
• Open to working out of one of our offices: Palo Alto, Austin, DC, or New York.

Responsabilités

• Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service communication, and the supply chain.
• Find and remediate overprivileged permissions, dangerous pod and workload settings, and escalation paths in operators, admission, networking, identity, and monitoring.
• Assess our own platform the way an adversary would, including container and pod breakout, privilege escalation, and movement across workloads, using safe and constrained validation, then fix what you find.
• Design and build security tooling and automation, including AI-assisted analysis, that catches risky configuration and overprivilege before or after it ships.

Connaissances

Kubernetes security

Offensive security

Go

Python

Rust

RBAC

Attack path analysis

Security tooling

Outils

Helm

GitOps

Kubernetes

Description du poste

SpaceXSI is seeking an security-focused platform engineer to safeguard the Kubernetes-based infrastructure and workloads powering the X and SpaceXSI stack. You will identify risks, implement durable fixes, and build tooling that scales with our fleet.

Work includes assessing attacker paths, hardening clusters, and delivering practical controls and automation in Go, Python, or Rust, across a distributed set of environments in the U.S. and beyond.