Sr. Security Engineer (Kubernetes)

Mindsource Inc; United States; Remote; USD 150,000 - 190,000; Part time

Job summary

Mindsource Inc. is seeking a Sr. Security Engineer specializing in Kubernetes for a 100% remote, long-term contract (W2).

The role focuses on securing large-scale infrastructure, building secure CI/CD pipelines, and automating security workflows. You will work with open-source security tools, implement IaC security, and contribute to SOC processes with incident response and threat detection capabilities. Candidates should have 5+ years in security engineering, strong Linux and database security

Qualifications

• 5+ years in a security engineering role with large-scale infrastructure focus.
• Experience with Kubernetes security hardening and RBAC/audit logging.
• Strong Linux system administration and database security knowledge.
• Proficiency in Python for development, scripting and automation.
• Experience with open-source security tools and SOC automation.

Responsibilities

• Secure Kubernetes clusters, containerized workloads, and cloud-native apps.
• Implement secure CI/CD pipelines to enforce security policies.
• Conduct Kubernetes security hardening, RBAC, and audit logging.
• Work with open-source security tools to monitor, detect, and remediate vulnerabilities.
• Be a builder of securty infra, not a user.
• Develop automated security workflows using Python, Ansible, and GitHub Actions.
• Integrate container security tools (Trivy, Falco, Anchore, OPA).
• Implement IaC security using Ansible and Terraform.
• Automate compliance checks and enforce security guardrails in CI/CD.

Skills

Kubernetes

Linux

Databases

Splunk

Python

Open-source tools

SOC automation

Tools

Ansible

Terraform

GitHub Actions

Trivy

Falco

Anchore

OPA (Open Policy Agent)

Wazuh

Teleport

OpenCTI

Job description

Title: Sr. Security Engineer (Kubernetes)

Location: 100% Remote

Duration: Long term

Type: Contract - W2

Experience : Minimum 5+ years in a security engineering role, with a focus on large-scale infrastructure and experience in open-source projects, development, and tooling.

Technical Skills :

• Strong experience with Kubernetes and container orchestration.
• Proficient in Linux system administration.
• Extensive knowledge of databases (both relational and NoSQL) with experience in elastic databases.
• Advanced knowledge of Splunk for monitoring, incident response, and integration with SOC processes.
• Strong in Python for development, scripting and automation.
• Demonstrated experience in developing and integrating open-source security tools.
• Proven experience with SOC automation and streamlining incident response processes.

Key Responsibilities:

Kubernetes Infrastructure & Deployment Security:

• Secure Kubernetes clusters, containerized workloads, and cloud-native applications.
• Implement secure CI/CD pipelines to enforce security policies in deployments.
• Conduct Kubernetes security hardening, RBAC configuration, and audit logging.
• Work with open-source security tools to monitor, detect, and remediate vulnerabilities.
• Be a builder of securty infra NOT a user

DevSecOps & Automation:

• Develop automated security workflows using Python, Ansible, and GitHub Actions.
• Integrate container security tools (e.g., Trivy, Falco, Anchore, Open Policy Agent (OPA)).
• Implement infrastructure-as-code (IaC) security using Ansible and Terraform.
• Automate compliance checks and enforce security guardrails in CI/CD processes.

Security Monitoring & Incident Response:

• Utilize Wazuh, Teleport, and OpenCTI for security monitoring, threat detection, and log analysis.
• Set up intrusion detection and SIEM solutions for Kubernetes environments.
• Respond to security incidents, conduct forensic analysis, and implement remediations.

Database & Network Security:

• Secure PostgreSQL and MariaDB databases with encryption, access control, and monitoring.
• Implement network security controls , including firewall rules, Zero Trust principles, and intrusion detection.
• Perform regular vulnerability scans and penetration testing to identify security gaps.