Engineering Tech Lead (Product Security)
About The Position
vCluster Labs is hiring an Engineering Tech Lead focused on Product Security to build secure infrastructure software. The role combines hands-on production engineering with product security work: designing, building, and maintaining production features; reviewing security-sensitive designs; threat modeling features; investigating vulnerabilities; and helping engineering teams make sound security decisions. Security tooling and compliance are not the primary focus. When security work is not queued, the role contributes to roadmap features. The position serves as the product’s security expert and helps embed secure defaults across engineering as the platform evolves. vCluster Labs is a venture-backed startup building infrastructure software for AI cloud providers and AI factories. The company describes its culture as remote-first, with headquarters in San Francisco and a distributed team.
Requirements
- Experience building and shipping production systems with Go as a primary language.
- Working knowledge of Kubernetes internals, including the API server, admission control, RBAC, controllers, and the kubelet.
- Hands-on experience with Kubernetes controllers or operators, ideally using controller-runtime, Kubebuilder, or client-go.
- Hands-on experience with Kubernetes attack surfaces, including container breakout, privilege escalation, RBAC, and policy best practices.
- Experience threat modeling and reviewing designs for production systems, and explaining risk clearly to other engineers.
- Experience investigating and fixing vulnerabilities in code, including the CVE lifecycle, coordinated disclosure, and patch releases.
Nice To Haves
- Certified Kubernetes Security Specialist (CKS) certification.
- Experience at an early-stage organization, working autonomously toward building something great.
Responsibilities
- Design, build, and maintain production features alongside the engineering team, including roadmap features when security work is not in the queue.
- Triage, prioritize, investigate, and fix vulnerabilities in code and dependencies through patched releases.
- Review security-sensitive designs early and threat model new features.
- Help teams make sound security decisions as the platform evolves.
- Participate in code reviews, design reviews, and technical discussions with the engineering team.
- Help engineers build secure defaults into the product.
Benefits
- Competitive compensation package, including equity.
- Health, dental, vision, and life insurance plans for employees and eligible dependents; benefits vary by country.
- Flexible working schedule, with emphasis on results rather than fixed clock-in and clock-out times.
- Flexible work location and willingness to adjust the work environment as circumstances change.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
