Senior Security Engineer — Remote, Open-Source Security

kestra; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health coverage

Home office equipment

Fully remote

Job summary

kestra is seeking an experienced security engineer to own the full security posture of an open-source orchestration platform and its cloud SaaS. The role blends offensive and defensive work, including threat modeling, hands-on testing, patching, and code contributions.

The ideal candidate has 5+ years in security engineering, deep cloud security expertise on AWS or GCP, and strong Kubernetes/Docker experience. This is a fully remote role with global collaboration and fast-paced OSS development.

Qualifications

• At least 5+ years in security engineering or similar roles.
• Hands-on penetration testing across applications, APIs, and networks.
• Able to read code and produce fixes or remediation guidance.
• Deep knowledge of cloud security on AWS or GCP and containerization with Kubernetes and Docker.
• Experience managing CVEs, OSS licensing, and software composition analysis tools.

Responsibilities

• Conduct penetration testing and threat modeling across web, APIs, control plane, and cloud.
• Remediate vulnerabilities in code, dependencies, containers, and cloud configs.
• Submit patches or PRs and collaborate with engineers to drive fixes.
• Harden cloud infrastructure, including Kubernetes clusters and IAM configurations.
• Embed SAST/DAST and dependency scanning into CI/CD pipelines.
• Review third-party libraries and assess OSS risk.
• Lead incident response and improve monitoring, detection, and response.

Skills

Security testing

Threat modeling

Cloud security

Code patching

Autonomous work

Tools

Kubernetes

Docker

GitHub Actions

SAST/DAST tools

Job description

kestra is seeking an experienced security engineer to own the full security posture of an open-source orchestration platform and its cloud SaaS. The role blends offensive and defensive work, including threat modeling, hands-on testing, patching, and code contributions.

The ideal candidate has 5+ years in security engineering, deep cloud security expertise on AWS or GCP, and strong Kubernetes/Docker experience. This is a fully remote role with global collaboration and fast-paced OSS development.