Sr. Application Security Engineer
Upload My Resume
Drop here or click to browse · PDF, DOCX, DOC, RTF, TXT
Requirements
• Expertise in Application Security with a minimum of 5+ years experience and strong focus on containerized environments. • Deep understanding of Kubernetes architecture, RBAC, and security specific to multi-tenant architectures. • Proficiency in Go programming language for reading and writing code related to the core product. Ability to identify vulnerabilities without solely relying on automated tools. • Experience with modern technology environments that are fast-paced and involve solving novel problems, particularly those relating to AI and multi-tenant infrastructure security. • Cognitive flexibility in viewing feedback as a learning mechanism rather than critique. Willingness to understand the unique needs of customers for tailored solutions. • Certifications such as CKS (Certified Kubernetes Security Specialist) or OSCP are preferred but not mandatory, with bonus points given if one has experience securing AI workloads or GPU cloud infrastructure and strong automation skills in security practices.
Responsibilities
• Perform deep-dive security reviews of our core Go-based applications and Kubernetes controllers as well as the frontend user interface with a focus on avoiding privilege escalation within our multi-tenant architecture. • Lead the threat modeling process for new features, proactively identifying risks associated with shared GPU resources and multi-cloud environments. • Integrate security checks into CI/dev workflows to ensure they are optimized for speed without becoming a bottleneck for engineering velocity while managing automated and manual scanning of our entire product stack. • Own the lifecycle of security vulnerabilities from discovery through remediation, triage both external and internal reports, drive resolution across the organization, and communicate effectively with stakeholders. • Contribute to feature development related to container breakouts and isolation as well as other new features directly tied to security topics within a fast-paced cutting-edge environment. • Provide developer training on complex attack vectors and secure coding concepts in Go language, making them easier for all engineers to understand.
Benefits
• Competitive Salary: We offer a competitive compensation package, including equity. • Platinum-Level Insurance: Health, dental, vision, and life Insurance, including plans for you and eligible dependents (benefits vary depending on country). • Flexible Working Schedule: You have a doctor’s appointment or need to head to the supermarket to get groceries at 2pm? We won’t have an issue with that. To us, results matter more than clocking in and out at the same time every day. • Workplace Flexibility: We’re very flexible about where you work. We know things can change in life and we’re happy to adjust the work environment for you along the way. • Culture & Values • At vCluster Labs, we value and stand for: • Open Source, Open Mind: We are actively contributing to and maintaining open-source projects. Internally, we foster meritocracy — the strongest ideas win, no matter who or where they come from. • Build Tomorrow’s Standards, Intentionally: We don't just ship software; we define the state-of-the-art of tomorrow. We are fearless in tearing down old approaches to build something better, but we are disciplined in how we do it because we know our users rely on our technology to run mission-critical infrastructure platforms. • Create Wow: We measure success by the experience we generate, both inside and outside the company. For our customers, this means impressive speed and intuitive experiences. For our team, this means going the extra mile to support one another and to continuously drive each other to new heights. • Own the Outcome: We understand that our responsibility doesn't end when a task is checked off; it ends when the value is delivered. We connect our daily individual actions to the broader success of the company and our customers.