Senior Software Engineer (Product Security)
vCluster Labs4 hours ago
Remote, Canada or Remote, EMEASenior
Base Salary
$135k - $175k/yr
Responsibilities
- Build and maintain production infrastructure software features in collaboration with the engineering team.
- Triage, prioritize, investigate, and fix vulnerabilities in code and dependencies through patched releases.
- Threat-model new features and review security-sensitive designs to identify risks early.
- Participate in code reviews, design reviews, and technical discussions.
- Improve secure defaults and security practices across the engineering organization.
- Work on roadmap features when dedicated security work is not queued.
Requirements
- Experience building and shipping production systems with Go as a primary language.
- Working knowledge of Kubernetes internals, including the API server, admission control, RBAC, controllers, and kubelet.
- Experience building Kubernetes controllers or operators with controller-runtime, Kubebuilder, or client-go is preferred.
- Hands-on knowledge of Kubernetes attack surfaces, including container breakout, privilege escalation, RBAC, and policy best practices.
- Experience with threat modeling, secure design reviews, and communicating risk clearly to engineers.
- Experience investigating and fixing vulnerabilities in owned code, including the CVE lifecycle, coordinated disclosure, and patch releases.
- CKS certification and early-stage startup experience are bonus qualifications.
Benefits
- Competitive compensation package including equity.
- Health, dental, vision, and life insurance for employees and eligible dependents, with availability varying by country.
- Flexible working schedule.
- Flexible workplace arrangements in a remote-first, globally distributed team.
Tech Stack
Categories
About vCluster Labs
vCluster Labs builds open-source and commercial tools that simplify Kubernetes multi-tenancy and platform operations for platform engineering and SRE teams. Its products include vCluster (virtual clusters for tenant isolation), DevPod, JsPolicy, and an Infrastructure Tenancy Platform for AI with an NVIDIA-validated DGX reference architecture. Privately held and headquartered in San Francisco, it reports 100+ enterprises using its solutions across EKS, AKS, GKE, and k3s environments.