Senior App Security Engineer: Kubernetes, Go & Threat Modeling

vCluster; United States; Remote; USD 150,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Equity

Platinum health insurance

Flexible schedule

Remote-friendly

Job summary

vCluster Labs is seeking a Sr. Application Security Engineer to architect trust across our Kubernetes-centric platform. You will own end-to-end security for the product and define standards that enable customers to run high-privileged workloads securely.

You will lead threat modeling, automate security checks in CI/CD, triage vulnerabilities, and collaborate with engineers to push secure features in multi-tenant environments.

Qualifications

• 5+ years in Application Security or Product Security.
• Strong focus on containerized environments.
• Proficient reading and writing Go; spot vulnerabilities in PRs.
• Deep understanding of Kubernetes architecture, RBAC, and container runtime security.
• Comfortable in fast-paced, cutting-edge environments and solving novel problems.

Responsibilities

• Perform deep-dive security reviews of core Go applications and Kubernetes controllers.
• Lead threat modeling for new features, especially multi-tenant and GPU workloads.
• Integrate security checks into CI/CD; optimize for speed to avoid bottlenecks.
• Own vulnerability lifecycle from discovery to remediation; communicate with stakeholders.
• Contribute to security features related to container isolation and multi-tenant safety.
• Train developers on secure coding and new attack vectors.

Skills

Kubernetes security

Go programming

Threat modeling

CI/CD security

Container security

RBAC & runtime security

Job description

vCluster Labs is seeking a Sr. Application Security Engineer to architect trust across our Kubernetes-centric platform. You will own end-to-end security for the product and define standards that enable customers to run high-privileged workloads securely.

You will lead threat modeling, automate security checks in CI/CD, triage vulnerabilities, and collaborate with engineers to push secure features in multi-tenant environments.