Senior Software Engineer (Product Security)

Accountabilities: • Design, build, and maintain production features alongside the broader engineering team, contributing to roadmap initiatives when dedicated security work is not in progress.

• Own vulnerability response from initial triage and prioritization through investigation, remediation, patched releases, and coordinated disclosure when required.

• Conduct threat modeling for new features and security-sensitive designs, identifying risks early and helping engineering teams make informed security decisions.

• Participate in code reviews, architecture reviews, and technical discussions, bringing a product security perspective to engineering decisions.

• Review the security implications of evolving platform architecture and identify opportunities to strengthen the product's security posture.

• Help engineers establish secure defaults and incorporate security considerations naturally into the software development lifecycle.

• Act as a technical security resource for the product, helping teams understand vulnerabilities, risks, mitigations, and practical security trade-offs.

Requirements:

• Proven experience building and shipping production software with Go as a primary programming language.

• Strong working knowledge of Kubernetes internals, including the API server, admission control, RBAC, controllers, and kubelet.

• Experience building Kubernetes controllers or operators using technologies such as controller-runtime, Kubebuilder, or client-go is highly relevant.

• Hands-on understanding of the Kubernetes attack surface, including container breakout, privilege escalation, RBAC risks, and security policy best practices.

• Experience with threat modeling and secure design reviews for production systems, with the ability to clearly communicate security risks and recommendations to engineers.

• Demonstrated experience investigating and fixing vulnerabilities in software you have worked on, including familiarity with the CVE lifecycle, coordinated disclosure, and security patch releases.

• Strong software engineering fundamentals and the ability to work deeply within complex codebases and distributed infrastructure.

• Ability to balance security priorities with product development and contribute to broader engineering objectives.

• Experience working autonomously and taking ownership in an early-stage or fast-moving environment is a plus.

• Certified Kubernetes Security Specialist (CKS) certification is a bonus.

Benefits:

• Competitive compensation package including equity.

• Health, dental, vision, and life insurance, with coverage options for eligible dependents depending on country.

• Flexible working schedule focused on outcomes rather than fixed working hours.

• Flexible workplace arrangements, allowing employees to adapt their work environment as circumstances change.

• Remote-first work environment within a globally distributed team.

• Opportunity to work on production infrastructure software and contribute directly to secure cloud-native and Kubernetes technologies.

• Opportunity to influence security practices across engineering rather than focusing solely on tooling or compliance.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1