Security Engineer, Kubernetes

Highlights

• Secure the Kubernetes platform running X and SpaceXSI at fleet scale.
• Hunt real attack paths like breakout and escalation, then ship durable fixes.
• Build AI-assisted tooling that catches risky configuration before it ships.

What they offer

• Equity
• Comprehensive medical, vision, and dental coverage
• 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance

Ideal candidate

Offensive-minded platform defender who thinks in attack paths and ships practical, fleet-scale controls over paperwork. You thrive owning Kubernetes risks end-to-end and partnering with platform teams in a fast, mission-driven environment.

Requirements

• 3+ years in platform security, Kubernetes security, or offensive security against production infrastructure
• Deep knowledge of pod and workload security: privileged containers, capabilities, host namespaces, host path mounts, service accounts, RBAC, admission control, and network isolation
• Working knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access
• Able to think like an attacker, measure blast radius, and turn the path into a detection, control, or tool
• Comfortable with operators, custom resources, Helm, and GitOps workflows
• Able to build or modify security tooling in Go, Python, or Rust when a control needs automation