Senior Cloud Security Engineer - Kubernetes Hardening

Redox, Inc.; Northern (KY); Hybrid; USD 165,000 - 190,000; Full time

Benefits offered by this job

100% remote first culture (US-based)

Unlimited Flexible Time Off

15+ Observed Holidays

Rest & R^Charge days (3-day weekend每月)

R^Charge sabbatical + stipend

401k match 50% up to 8%

Medical/Dental/Vision Benefits on Day

HSA & FSA, Life, Disability, Travel &

Job summary

Redox, Inc. is seeking a Senior Security Engineer to own cloud-native and application security across the Redox platform.

This hands-on IC role moves beyond risk identification to actively hardening our environment, performing code reviews, and translating control gaps into engineering proposals that drive production impact. You will partner with Engineering, embedding security into the SDLC through hands‑on work across container security and architecture reviews, following established security

Qualifications

• 5+ years in security engineering with hands-on delivery across system hardening, security engineering projects, and peer mentorship.
• Strong technical proficiency in Kubernetes security, specifically network policy orchestration, admission control (Kyverno), and container hardening protocols.
• Experience with threat modeling for applications built using Node.js, TypeScript, Python or Go.
• Hands‑on experience supporting secure SDLC practices and CI/CD safeguards using GitHub Actions, ensuring artifact validity and pipeline integrity.
• Direct experience hardening Infrastructure-as-Code (Terraform) and managing enterprise secrets via AWS Secrets Manager, Vault, or similar platforms.
• Solid experience across the vulnerability management lifecycle, from initial triage to production remediation.
• Ability to apply compliance frameworks like HITRUST and SOC 2 into pragmatic technical controls that align with engineering workflows.
• Strong written communication skills, with the ability to clearly document decisions and collaborate effectively within a remote, asynchronous organizational culture.
• Proficiency in AI tools and techniques, including prompt engineering and hands‑on experience across multiple large language model platforms, with a demonstrated ability to automate workflows using AI.

Responsibilities

• Own Cloud Security Posture Management including Kubernetes and Container security practices, admission control, network policies, image integrity, and environment hardening.
• Manage comprehensive vulnerability lifecycles, prioritizing remediation based on actual production exposure rather than simplistic finding metrics.
• Collaborate with Platform Engineering to support secure SDLC and CI/CD safeguards, focusing on artifact validity and pipeline integrity.
• Convert HITRUST and SOC 2 compliance frameworks into actionable technical configurations and operational controls.
• Evaluate and secure infrastructure-as-code across all environments.
• Execute incident response duties, encompassing forensic investigation and the facilitation of blameless post‑mortem analyses.
• Contribute to security standards within Engineering through design reviews, collaborative pairing, and mentorship of peers.
• Support bug bounty triage and maintain professional engagement with external security researchers.

Skills

Kubernetes security

Threat modeling

Secure SDLC

CI/CD security

Infrastructure-as-Code

Incident response

Communication

AI tools & prompt engineering

Tools

AWS

Docker

EKS

CrowdStrike

Okta

GuardDuty

SumoLogic

Kyverno

Karpenter

KEDA

VPA

Velero

Crossplane

GitHub Actions

Terraform

Helm

ArgoCD

Atlantis

Postgres

Redis

Kafka

Job description

Redox, Inc. is seeking a Senior Security Engineer to own cloud-native and application security across the Redox platform.

This hands-on IC role moves beyond risk identification to actively hardening our environment, performing code reviews, and translating control gaps into engineering proposals that drive production impact. You will partner with Engineering, embedding security into the SDLC through hands‑on work across container security and architecture reviews, following established security