Kubernetes Security Tech Lead (Remote, Equity)

vclusterlabs; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Equity

Health insurance

Dental insurance

Vision insurance

Life insurance

Job summary

vclusterlabs is seeking a hands-on Product Security Leader to guide security for our Kubernetes-centric infrastructure software. You will test products for weaknesses, guide secure design as features evolve, and own vulnerability response through remediation and release, blending security research with close collaboration across engineering.

Responsibilities include penetration testing Kubernetes environments, triaging and patching vulnerabilities, threat-modeling features, and participating in

Qualifications

• Practical penetration testing experience in production systems.
• Deep knowledge of Kubernetes attack surfaces (breakout, privilege escalation, RBAC, policy controls).
• Understanding of Kubernetes internals (API server, admission controllers, controllers, kubelet).
• Experience threat modeling production systems and reviewing designs for security risks.
• Experience owning vulnerability remediation and CVE processes and patch releases.
• Experience shipping production software with Go.

Responsibilities

• Penetration test products and infrastructure, focusing on Kubernetes environments and container isolation.
• Triage, prioritize, investigate, and help fix vulnerabilities in production releases.
• Threat model proposed features and review security-sensitive designs early in development.
• Participate in code reviews, design reviews, and technical discussions, explaining security risks to engineers.
• Help engineering teams adopt secure defaults and improve day-to-day security practices.

Skills

Penetration testing

Kubernetes security

Threat modeling

Remediation & disclosure

Go development

Code review security

Tools

Kubebuilder

controller-runtime

client-go

Job description

vclusterlabs is seeking a hands-on Product Security Leader to guide security for our Kubernetes-centric infrastructure software. You will test products for weaknesses, guide secure design as features evolve, and own vulnerability response through remediation and release, blending security research with close collaboration across engineering.

Responsibilities include penetration testing Kubernetes environments, triaging and patching vulnerabilities, threat-modeling features, and participating in