Remote Senior Product Security Engineer: K8s & Cloud

Hidden Jobs; United States; Remote; USD 157,000 - 184,000; Full time

Benefits offered by this job

Remote-first culture

Coworking stipend

Health insurance

Parental leave

Job summary

Hidden Jobs seeks a Senior Product Security Engineer embedded in engineering to secure software supply chains and harden cloud-native product infrastructure built on Kubernetes across GCP and AWS.

You will design and enforce secure CI/CD pipelines, integrate SBOMs and provenance attestation, and lead security reviews for Kubernetes workloads. This role emphasizes hands-on security with modern tooling and cloud platforms.

Qualifications

• Five+ years in software or security engineering with hands-on security responsibility.
• Proficiency in Go or Python; production-quality code writing and review.
• Deep hands-on Kubernetes production experience: cluster hardening, RBAC, network policies.
• Practical use of GCP and/or AWS security services, IAM, workload identity, secrets.
• Experience designing and securing CI/CD pipelines with GitHub Actions, Cloud Build, or Tekton.
• Familiarity with Sigstore, SLSA, SBOM tooling and OWASP/NIST/cloud security frameworks.

Responsibilities

• Design, build, and maintain secure CI/CD pipelines with security gates.
• Implement software supply chain security controls (signed artifacts, SBOMs, attestation).
• Lead security architecture reviews and threat modeling for Kubernetes workloads on GCP/AWS.
• Harden container images, Kubernetes configurations, and cloud IAM postures.
• Define baseline security standards for pod security, network policies, workload identity, and secrets management.
• Identify emerging customer security needs and build solutions.

Skills

Go

Python

Kubernetes

Cloud security

CI/CD security

Threat modeling

Tools

GitHub Actions

Cloud Build

Tekton

Sigstore

SLSA

SBOM generation

Job description

Hidden Jobs seeks a Senior Product Security Engineer embedded in engineering to secure software supply chains and harden cloud-native product infrastructure built on Kubernetes across GCP and AWS.

You will design and enforce secure CI/CD pipelines, integrate SBOMs and provenance attestation, and lead security reviews for Kubernetes workloads. This role emphasizes hands-on security with modern tooling and cloud platforms.