Kubernetes Security Engineer: Scale & Defend the Platform

Maven Ventures; Palo Alto (CA); On-site; USD 100,000 - 258,000; Full time

Benefits offered by this job

Equity

Medical

401(k)

Disability insurance

Dental coverage

Job summary

SpaceXSI is hiring a security-focused engineer to protect and automate the platform behind X and SpaceXSI products. You will secure clusters, nodes, and workloads, while reducing privilege risks and strengthening the platform's supply chain.

You will design security tooling, implement AI-assisted analysis, and collaborate with platform and product teams to ship safer defaults and hardened configurations at scale.

Qualifications

• 3+ years in platform security with Kubernetes security experience.
• Ability to identify attack paths and translate findings into detections or tooling.
• Experience designing and building security tooling and automation.

Responsibilities

• Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, and supply chain.
• Remediate overprivileged permissions and risky pod/workload settings across components.
• Assess platform like an adversary and implement fixes, detections, and controls.
• Design and build security tooling, including AI-assisted analysis, for proactive risk detection.
• Strengthen identity and secrets handling so apps receive only needed access.
• Improve supply-chain security with secure base images and continuous scanning.
• Review changes affecting RBAC, operators, and elevated privileges; work with teams as security owner.
• Contribute to fleet-wide hardening and safer defaults.

Skills

Kubernetes security

Attack-path thinking

Security tooling

Tools

Go

Python

Rust

Job description

SpaceXSI is hiring a security-focused engineer to protect and automate the platform behind X and SpaceXSI products. You will secure clusters, nodes, and workloads, while reducing privilege risks and strengthening the platform's supply chain.

You will design security tooling, implement AI-assisted analysis, and collaborate with platform and product teams to ship safer defaults and hardened configurations at scale.