Назад
Company hidden
8 дней назад

Engineering Tech Lead (Product Security)

150 000 - 200 000$
Формат работы
remote (только Europe)
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
Europe/Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Engineering Tech Lead (Product Security) (Kubernetes/Go): Building secure infrastructure software for AI cloud platforms with an accent on penetration testing, Kubernetes security, and vulnerability response. Focus on threat modeling, reviewing security-sensitive designs, investigating vulnerabilities, and improving secure engineering practices.

Location: Remote in Canada or EMEA

Compensation: United States $150K–$200K annually; Germany €80K–€135K annually; Canada CA$140K–CA$200K annually. Equity and bonuses are offered.

Company

hirify.global Labs is a venture-backed startup building open-source Kubernetes tenant isolation and AI infrastructure platforms for AI cloud providers and AI factories, supporting GPU infrastructure, managed Kubernetes, Slurm, Ray, and inference clusters.

What you will do

  • Perform penetration testing of products and infrastructure, focusing on Kubernetes and container isolation.
  • Own vulnerability response by triaging, prioritizing, investigating, and fixing security issues through patched releases.
  • Threat-model new features and review security-sensitive designs to identify risks early.
  • Participate in code reviews, design reviews, and technical discussions with engineering.
  • Improve security practices and secure defaults across the engineering organization.

Requirements

  • Hands-on experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise.
  • Hands-on knowledge of the Kubernetes attack surface, including container breakout, privilege escalation, RBAC, and policy best practices.
  • Working knowledge of Kubernetes internals, including the API server, admission control, RBAC, controllers, and kubelet.
  • Experience building controllers or operators with controller-runtime, Kubebuilder, or client-go.
  • Experience threat-modeling and reviewing designs for production systems, and explaining risk clearly to engineers.
  • Experience investigating and fixing vulnerabilities in code, including the CVE lifecycle, coordinated disclosure, and patch releases.
  • Experience building and shipping production systems with Go as the primary language.

Nice to have

  • Certified Kubernetes Security Specialist certification.
  • Experience at an early-stage organization with autonomous execution.

Culture & Benefits

  • Remote-first culture with workplace flexibility and a flexible working schedule.
  • Health, dental, vision, and life insurance for employees and eligible dependents, varying by country.
  • Competitive compensation with equity and country-specific benefits.
  • Values include ownership, bias for action, open-source contribution, meritocracy, and intentional development of infrastructure standards.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →