Kubernetes Security Engineer - Scale-Secure Platform

SpaceX Super Intelligence; Washington (District of Columbia); Presencial; USD 100.000 - 258.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity/stock options

Medical, vision, dental coverage

401(k) retirement plan

Disability insurance

Life insurance

Employee discounts and perks

Descripción de la vacante

SpaceXSI is seeking a security-focused engineer to protect the SpaceXSI and X platform, securing Kubernetes environments and building durable tooling. You will think like an attacker to identify breakouts, privilege escalations, and risky configurations, then implement robust defenses across production workloads.

Responsibilities include end-to-end platform security, designing automation, and creating pragmatic controls. Office locations include DC, with no remote requirement.

Formación

• 3+ years in platform security, Kubernetes security, or offensive security against production infrastructure.
• Deep knowledge of pod and workload security: privileged containers, capabilities, host namespaces, host path mounts, service accounts, RBAC, admission control, and network isolation.
• Working knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access.
• Able to think like an attacker, measure blast radius, and turn the path into a detection, control, or tool.
• Comfortable with operators, custom resources, Helm, and GitOps workflows.
• Able to build or modify security tooling in Go, Python, or Rust when a control needs automation.
• Bonus: Image scanning, SBOMs, secure base images, policy-as-code (Kyverno, OPA), multi-cluster environments, runtime detection, and security testing of customer-facing application
• Open to working out of one of our offices: Palo Alto, Austin, DC, or New York.

Responsabilidades

• Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service communication, and the supply chain.
• Find and remediate overprivileged permissions, dangerous pod and workload settings, and escalation paths in operators, admission, networking, identity, and monitoring.
• Assess our own platform the way an adversary would, including container and pod breakout, privilege escalation, and movement across workloads, using safe and constrained validation, then fix what you find.
• Design and build security tooling and automation, including AI-assisted analysis, that catches risky configuration and overprivilege before or after it ships.

Conocimientos

Kubernetes security

Offensive security mindset

Go

Python

Rust

GitOps

Helm

Admission control

Network isolation

Herramientas

Kubernetes

Go

Python

Rust

Kyverno

OPA

GitOps

Descripción del empleo

SpaceXSI is seeking a security-focused engineer to protect the SpaceXSI and X platform, securing Kubernetes environments and building durable tooling. You will think like an attacker to identify breakouts, privilege escalations, and risky configurations, then implement robust defenses across production workloads.

Responsibilities include end-to-end platform security, designing automation, and creating pragmatic controls. Office locations include DC, with no remote requirement.