Senior Software Engineer (Product Security)

vCluster Labs • New York, NY

1d • Remote

About The Position

vCluster Labs is looking for a Senior Software Engineer focused on Product Security to help us build secure infrastructure software from the ground up. You'll design, build, and maintain production features alongside the rest of the engineering team, while bringing a security perspective to the broader product by reviewing security-sensitive designs, threat modeling new features, investigating vulnerabilities, and helping teams make sound security decisions as the platform evolves. Operating security tooling and compliance are not the primary goals; we need an experienced engineer who can work deeply in our codebase and architecture, build security into the product itself, and serve as the security expert for our product.

Requirements

• Experience building and shipping production systems with Go as a primary language.
• Working knowledge of the Kubernetes API server, admission control, RBAC, controllers, and the kubelet, ideally from building controllers or operators with controller-runtime, Kubebuilder, or client-go.
• Hands-on experience with container breakout, privilege escalation, RBAC, and policy best practices.
• Experience threat modeling and reviewing designs for production systems, and explaining risk clearly to other engineers.
• Experience investigating and fixing vulnerabilities in code you work on, including the CVE lifecycle, coordinated disclosure, and patch releases.

Nice To Haves

• CKS certification: Certified Kubernetes Security Specialist.
• Experience at an early-stage organization where you function autonomously and strive towards building something great.

Responsibilities

• Design, build, and maintain production features alongside the rest of the engineering team. When there's no security work in the queue, you work on roadmap features.
• Triage, prioritize, and fix security issues in our code and dependencies through to a patched release.
• Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves.
• Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team.
• Help engineers build secure defaults into the product.

Benefits

• Competitive compensation package, including equity.
• Health, dental, vision, and life Insurance, including plans for you and eligible dependents (benefits vary depending on country).
• Flexible Working Schedule
• Workplace Flexibility

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed