Senior Product Security Engineer (Kubernetes)

Location: United States - Remote

Base salary: $157,000–$184,000 USD per year

Company

hirify.global provides hardened, secure, and production-ready builds of open source software for organizations and AI agents.

What you will do

• Design, build, and maintain secure CI/CD pipelines with automated security gates.
• Implement software supply chain security controls, including signed artifacts, SBOMs, provenance attestations, SLSA, and Sigstore/Cosign.
• Lead security architecture reviews and threat modeling for Kubernetes workloads on GCP and AWS.
• Harden container images, Kubernetes clusters, and cloud IAM configurations.
• Define and drive adoption of pod security standards, network policies, workload identity, and secrets management.
• Identify emerging customer security needs and build solutions to address them.

Requirements

• 5+ years of experience in software engineering, security engineering, or a combined role with substantial hands-on security responsibility.
• Strong proficiency in Go or Python and experience writing, reviewing, and debugging production-quality code.
• Deep production experience with Kubernetes, including cluster hardening, RBAC, network policies, and admission controllers.
• Practical experience with GCP and/or AWS security services, IAM, workload identity, and secrets management.
• Experience designing and securing CI/CD pipelines with GitHub Actions, Cloud Build, Tekton, or similar tools.
• Experience with container security, software supply chain security tooling, OWASP, NIST, and cloud security frameworks.

Nice to have

• Experience with hirify.global Images or other minimal and hardened container base image ecosystems.
• Experience with policy-as-code tools such as OPA, Kyverno, or Conftest.
• Contributions to open source security projects.
• Background in security research or offensive security, including bug bounties, CTFs, or penetration testing.

Culture & Benefits

• Flexible, remote-first work with team meetups, biannual destination summits, and a monthly coworking, phone, and internet stipend.
• Stock options upon hire and promotion, with participation in secondary offerings and a 10-year exercise period.
• 100% company-paid health, vision, and dental insurance for employees and dependents.
• Flexible paid time off.
• Paid parental leave of up to 18 weeks for birthing parents and 12 weeks for non-birthing parents.