Senior Security Engineer
Kestra Technologies2 days ago
Remote, WorldwideSenior
Responsibilities
- Conduct hands-on penetration testing and threat modeling across web applications, APIs, control planes, and cloud environments.
- Manage vulnerabilities across codebases, software dependencies, container images, and cloud infrastructure.
- Write patches, submit pull requests, and collaborate with product teams on security remediation.
- Audit and harden GCP infrastructure, Kubernetes clusters, and networking configurations.
- Automate SAST, DAST, dependency scanning, and other security tooling into CI/CD pipelines.
- Perform security code reviews and assess third-party dependencies, open-source integrations, and supply-chain risks.
- Lead incident response and establish continuous monitoring, detection, and mitigation strategies.
Requirements
- 5+ years of experience in Security Engineering, Product Security, DevSecOps, or combined offensive/defensive security roles.
- Strong hands-on penetration-testing experience covering application, API, and network-level vulnerabilities.
- Ability to read code, understand exploits, write fixes, and provide remediation guidance.
- Deep familiarity with cloud security, including AWS or GCP, and containerized environments using Kubernetes and Docker.
- Experience with dependency security, supply-chain security, CVE management, open-source licensing, and SCA tools.
- Fluent English communication and comfort working autonomously in a fully remote environment.
- Adaptability to a fast-paced open-source startup environment.
Benefits
- Remote-first work from anywhere, with access to coworking spaces worldwide.
- Medical, dental, and vision coverage.
- Company-provided home-office equipment.
- Hiring process intended to take 2–3 weeks, with timeline flexibility if needed.
Tech Stack
Apache KafkaArgo CDDockerElasticsearchGitHub ActionsGoogle Cloud PlatformGrafanaJavaJavaScriptKubernetesPostgreSQLPrometheusRedisTerraformTypeScript
Categories
About Kestra Technologies
Kestra Technologies builds an open-source orchestration platform for engineers to automate data pipelines, AI/agent workflows, IT tasks, and business processes. The company offers a declarative, Everything-as-Code approach with both scheduled and event-driven execution, and provides commercial enterprise features and support. Founded in 2022 and headquartered in New York, Kestra reports adoption by organizations such as JPMorgan Chase, Bloomberg, FILA, and Crédit Agricole.