Engineering Tech Lead (Product Security)
vCluster Labs19 days ago
Remote, Canada or Remote, EMEAStaff+
Base Salary
$150k - $200k/yr
Responsibilities
- Conduct penetration testing of products and infrastructure, focusing on Kubernetes and container isolation.
- Own vulnerability response by triaging, prioritizing, fixing, and releasing patches for security issues.
- Threat model new features and review security-sensitive designs.
- Participate in code reviews, design reviews, and engineering discussions.
- Improve secure defaults and security practices across the engineering organization.
- Investigate vulnerabilities through the CVE lifecycle, coordinated disclosure, and patch releases.
Requirements
- Hands-on experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise.
- Knowledge of Kubernetes attack surfaces, including container breakout, privilege escalation, RBAC, and policy best practices.
- Working knowledge of Kubernetes API server, admission control, RBAC, controllers, and kubelet internals.
- Experience building controllers or operators with controller-runtime, Kubebuilder, or client-go is preferred.
- Experience threat modeling and reviewing production-system designs.
- Experience explaining security risks clearly to engineers.
- Experience investigating and fixing vulnerabilities in owned code, including CVE lifecycle and coordinated disclosure processes.
- Experience building and shipping production systems with Go as the primary language.
- CKS certification and early-stage startup experience are bonus qualifications.
Benefits
- Competitive compensation package including equity.
- Health, dental, vision, and life insurance for employees and eligible dependents, with benefits varying by country.
- Flexible working schedule.
- Remote-first workplace flexibility with a globally distributed team.
Tech Stack
Categories
About vCluster Labs
vCluster Labs builds open-source and commercial tools that simplify Kubernetes multi-tenancy and platform operations for platform engineering and SRE teams. Its products include vCluster (virtual clusters for tenant isolation), DevPod, JsPolicy, and an Infrastructure Tenancy Platform for AI with an NVIDIA-validated DGX reference architecture. Privately held and headquartered in San Francisco, it reports 100+ enterprises using its solutions across EKS, AKS, GKE, and k3s environments.