Senior Software Engineer (Product Security)
New
J
JobgetherCloud infrastructure
Based in United StatesFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- KubernetesGo
Requirements
- Have proven experience building and shipping production software with Go as a primary programming language.
- Have strong working knowledge of Kubernetes internals, including the API server, admission control, RBAC, controllers, and kubelet.
- Bring experience building Kubernetes controllers or operators using technologies such as controller-runtime, Kubebuilder, or client-go.
- Understand the Kubernetes attack surface, including container breakout, privilege escalation, RBAC risks, and security policy best practices.
- Have experience with threat modeling and secure design reviews for production systems.
- Be able to communicate security risks and recommendations clearly to engineers.
- Have experience investigating and fixing vulnerabilities in software, including familiarity with the CVE lifecycle, coordinated disclosure, and security patch releases.
- Have strong software engineering fundamentals and experience working within complex codebases and distributed infrastructure.
- Be able to balance security priorities with product development and broader engineering objectives.
- CKS certification is a bonus.
Responsibilities
- Design, build, and maintain production features alongside the engineering team.
- Own vulnerability response from triage and prioritization through investigation, remediation, patched releases, and coordinated disclosure when required.
- Conduct threat modeling for new features and security-sensitive designs.
- Participate in code reviews, architecture reviews, and technical discussions with a product security perspective.
- Review platform architecture for security implications and identify opportunities to strengthen product security.
- Help engineers establish secure defaults and incorporate security into the software development lifecycle.
- Advise product teams on vulnerabilities, risks, mitigations, and practical security trade-offs.
View Full Description & ApplyYou'll be redirected to the employer's site
