Senior Product Security Engineer - Cloud, PKI & Kubernetes

Aalyria; United States; Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Innovative environment

Impactful work

Growth opportunities

Inclusive culture

Flexible schedules

Equity options

Job summary

Aalyria seeks a senior to staff-level product security professional to be the technical voice across security and IT. You’ll own application security, CI/CD and supply-chain security, and product infrastructure security including Kubernetes hardening and mTLS across distributed services.

You will collaborate with hardware engineering on Tightbeam and drive security programs, incident response, vulnerability management, and post-mortems while mentoring engineers and raising the security bar

Qualifications

• Senior- or staff-level hands-on experience in product security or security engineering.
• Production experience securing cloud environments with IAM, org policy, VPC Service Controls, KMS, and Kubernetes at depth.
• Strong cryptographic foundations, PKI, key management, signing, and secrets handling at scale.
• Hands-on coding ability in Python, Bash, and Go; Terraform/scripts for tooling and automation.
• Experience leading product incident response, triage, and post-mortems.
• Mentoring engineers and raising the security bar across teams.

Responsibilities

• Own application & software security, SAST/DAST/SCA, secure SDLC, and vulnerability management.
• Secure CI/CD pipelines, build provenance, dependency integrity, signing, and SLSA-aligned controls.
• Harden GKE/Kubernetes, container security, workload identity, network policy, and runtime protection.
• Manage PKI lifecycle: certificate issuance, rotation, and mTLS across services and remote assets.
• Lead vulnerability triage, remediation tracking, and exception handling for upstream and internal findings.
• Lead product incident response, coordinate with IR, drive post-mortems and action items.
• Hardening product infrastructure with baselines, secure defaults, and compensating controls.
• Partner with Hardware/firmware teams on firmware security, secure boot, and key storage.

Skills

Product security

Cloud security

PKI architecture

Python

Go

Bash

Terraform

CI/CD security

Threat modeling

Vulnerability management

Tools

GitLab

Kubernetes

Terraform

mTLS

SAST/DAST

SCA

Job description

Aalyria seeks a senior to staff-level product security professional to be the technical voice across security and IT. You’ll own application security, CI/CD and supply-chain security, and product infrastructure security including Kubernetes hardening and mTLS across distributed services.

You will collaborate with hardware engineering on Tightbeam and drive security programs, incident response, vulnerability management, and post-mortems while mentoring engineers and raising the security bar