Senior Application Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Core Product Security: Conduct comprehensive security assessments of our primary Go-based applications and Kubernetes controllers, along with the frontend user interface, focusing on preventing privilege escalation within our multi-tenant architecture.

• Threat Modeling: Spearhead the threat modeling initiative for new features, proactively identifying risks linked to shared GPU resources and multi-cloud environments.

• Automated Security: "Shift left" by further integrating security checks into our CI and development workflows. Enhance these checks for speed, ensuring that security does not hinder engineering velocity. Additionally, you will oversee both automated and manual scanning of our entire product stack.

• Vulnerability Management: Take ownership of the security vulnerability lifecycle, from discovery to resolution. You will assess both external and internal reports, drive the resolution of critical issues throughout the engineering organization, and communicate effectively with all stakeholders.

• Feature Development: Everyone in the organization plays a role in both brainstorming and developing new features, many of which are directly related to security topics such as container breakouts and isolation, pushing the boundaries of what’s achievable in constrained environments.

• Developer Training: Simplify complex topics for all engineers, including emerging attack vectors and secure coding principles.

⛳️ Requirements

• Experience: You possess over 5 years of experience in Application Security or Product Security, with a strong emphasis on containerized environments.

• Kubernetes Depth: You have an in-depth understanding of Kubernetes architecture, RBAC, and container runtime security, including the specific risks associated with multi-tenancy.

• Code Proficiency: You are adept at reading and writing Go, which is the language of our core product. You can identify vulnerabilities in a PR without solely depending on automated tools.

• Modern Tech Mindset: You excel in fast-paced, cutting-edge environments and are eager to tackle novel challenges related to AI and multi-tenant infrastructure.

• Cognitive Flexibility: You perceive feedback as a means of learning rather than criticism, and you are open to understanding the unique needs and concerns of our customers.

• Bonus Points for: Certifications such as CKS (Certified Kubernetes Security Specialist) or OSCP.

• AI/GPU Context: Experience in securing AI workloads or GPU cloud infrastructure.

• Automation Skills: Proficiency in writing custom security tools or automation scripts in Python or Go.

• Documentation: A readiness to contribute to our public-facing security documentation and "Trust Center" to assist our customers with compliance navigation.

🏝️ Benefits

• Competitive Salary: We provide a competitive compensation package, which includes equity.

• Platinum-Level Insurance: Health, dental, vision, and life insurance options are available, including plans for you and eligible dependents (benefits may vary by country).

• Flexible Working Schedule: Need to attend a doctor’s appointment or run errands at 2pm? We have no issue with that. For us, results are more important than adhering to fixed working hours.

• Workplace Flexibility: We are very accommodating regarding your work location. We understand that life can change, and we are happy to adapt your work environment as needed.