Security Engineer, Kubernetes

Job summary

Responsibilities

We protect the platform that runs X and SpaceXSI. We don’t just report issues, we actively look for real risks and exploits in our Kubernetes environments and turn them into durable fixes and tooling. You will secure the platform behind X and SpaceXSI’s infrastructure, products, and workloads.

• Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service communication, and the supply chain
• Find and remediate overprivileged permissions, dangerous pod and workload settings, and escalation paths in operators, admission, networking, identity, and monitoring
• Assess our own platform the way an adversary would, including container and pod breakout, privilege escalation, and movement across workloads, using safe and constrained…
• Design and build security tooling and automation, including AI-assisted analysis, that catches risky configuration and overprivilege before or after it ships
• Strengthen identity and secrets handling so workloads receive only the access they need

What they're looking for

• 3+ years in platform security, Kubernetes security, or offensive security against production infrastructure
• Deep knowledge of pod and workload security: privileged containers, capabilities, host namespaces, host path mounts, service accounts, RBAC, admission control, and network…
• Working knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access
• Able to think like an attacker, measure blast radius, and turn the path into a detection, control, or tool
• Comfortable with operators, custom resources, Helm, and GitOps workflows

Tech stack

• Kubernetes
• Go
• Python
• Rust