Engineering Tech Lead (Product Security)

vCluster Labs is looking for an Engineering Tech Lead focused on Product Security to help us build secure infrastructure software from the ground up. You'll bring hands-on penetration testing and deep Kubernetes expertise to our products, while reviewing security-sensitive designs, threat modeling new features, investigating vulnerabilities, and helping teams make sound security decisions as the platform evolves.

Responsibilities

Penetration testing of products and infrastructure for exploitable weaknesses, with a focus on Kubernetes and container isolation; Owning vulnerability response, including triaging, prioritizing, and fixing security issues in code and dependencies through to a patched release; Threat modeling new features by reviewing security-sensitive designs early, identifying risks, and helping teams make sound security decisions; Participating in code reviews, design reviews, and technical discussions with the engineering team; Improving security practices across engineering by helping engineers build secure defaults into the product

Requirements

Hands-on penetration testing experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise; Kubernetes attack surface knowledge, including container breakout, privilege escalation, RBAC, and policy best practices; Kubernetes internals depth, including the API server, admission control, RBAC, controllers, and the kubelet, ideally from building controllers or operators with controller-runtime, Kubebuilder, or client-go; Threat modeling and secure design experience, including reviewing designs for production systems and explaining risk clearly to other engineers; Vulnerability ownership, including investigating and fixing vulnerabilities, the CVE lifecycle, coordinated disclosure, and patch releases; Production engineering experience in Go as a primary language

Nice to have

CKS certification (Certified Kubernetes Security Specialist); Startup experience at an early-stage organization where you function autonomously

Benefits

Competitive salary package, including equity; Premium insurance covering health, dental, vision, and life insurance for you and eligible dependents (benefits vary by country); Flexible working schedule; Workplace flexibility