Senior Security Engineer

Who We Are

Vultr is on a mission to make high-performance cloud infrastructure easy to use, affordable, and locally accessible for enterprises and AI innovators around the world. With 33 global cloud data center locations, Vultr is trusted by hundreds of thousands of active customers across 185 countries for its flexible, scalable, global Cloud Compute, Cloud GPU, Bare Metal, and Cloud Storage solutions. In December 2024 Vultr announced an equity financing at a $3.5 billion valuation. Founded by David Aninowsky and self-funded for over a decade, Vultr has grown to become the world’s largest privately-held cloud infrastructure company.

Join Vultr

The Security Engineering team is a central pillar of our growth strategy, and we are looking for a Senior Security Engineer to help drive our vision of building secure, scalable cloud infrastructure through innovative Python-based tooling and automation.

You'll architect and develop cutting-edge security tools that protect Vultr's global cloud infrastructure while empowering engineering teams through self-service security automation. This role focuses on building production-grade Python security tools, Kubernetes security automation, and seamless CI/CD pipeline integrations that scale across our 32 data centers worldwide.

What to expect

- Design and develop Python-driven security tools, including vulnerability scanners, API security validators, and CI/CD security gateways using Flask/FastAPI
- Build comprehensive Kubernetes security automation, including RBAC policy generators, runtime threat detection systems, and automated secrets rotation
- Create self-service security tools that empower engineering teams with infrastructure-as-code validators and container compliance checks
- Enhance GitLab CI/CD pipelines with custom security automation, integrating SAST/DAST workflows and secrets detection
- Develop Grafana-compatible tooling for real-time security metrics aggregation, log analysis, and threat visibility dashboards
- Modernize legacy PHP systems through Python-based wrappers and migration pipelines
- Collaborate cross-functionally to integrate security tooling seamlessly into development workflows
- Champion security automation best practices across cloud-native environments
- Respond to security incidents with custom tooling and automated remediation workflows
- Mentor team members on secure development practices and tool architecture

Compensation

$100,000-$130,000

Final compensation will vary depending on years of experience, background/skill set, location, and applicable laws.

Vultr Cares

- 100% company-paid insurance premiums for employee medical, dental and vision plans.
- 401(k) plan that matches 100% up to 4%, with immediate vesting
- Professional Development Reimbursement of $2,500 each year
- 11 Holidays + Paid Time Off Accrual + Rollover Plan
- Commitment matters to Vultr! Increased PTO at 3 year and 10 year anniversary + 1 month paid sabbatical every 5 years + Anniversary Bonus each year
- $500 stipend for remote office setup in first year + $400 each following year
- Internet reimbursement up to $75 per month
- Gym membership reimbursement up to $50 per month
- Company paid Wellable subscription

Requirements

5+ years of security-focused software development experience with demonstrated tool-building expertise; Advanced Python proficiency with production-grade development using Flask/FastAPI, async workflows, and comprehensive testing frameworks; Hands-on Kubernetes tooling experience, including operators, admission controllers, or custom security automation development; Practical experience with Grafana dashboard creation, metrics collection, and GitLab CI/CD pipeline customization; Basic PHP familiarity for legacy system collaboration and modernization projects; Strong understanding of security automation principles and DevSecOps practices; Experience with container security, secrets management, and infrastructure-as-code security validation; Ability to build scalable security solutions that integrate with existing development workflows; Track record of creating self-service tools that reduce manual security overhead