We use technical cookies and visit statistics: Yandex Metrica and Zorky's own de-identified visit log (cookie zk_aid). We never collect form contents, search text or full IP addresses, and never sell data. Opt out with the button below, or with Global Privacy Control or Do Not Track in your browser. More about cookies and statistics.
Zorky CRMZorky CRM
EN|RU
@termdocs
← All jobs

Engineering Tech Lead (Product Security)

leadremote~$11.7K /moItaly, ITScore 94.5/1001d ago
Market insights
📊 Security: salaries and demand on the market
Stack
cloudkubernetes
Show company and link
Free. Sign in with email.
Apply
Upload your CV — we will connect you with the employer directly through our pool.
Send your CV →
Description
Accountabilities - Penetration Testing and Security Assessments: Conduct hands-on penetration testing of products and infrastructure to identify and exploit vulnerabilities, with particular focus on Kubernetes environments, container isolation, and cloud-native systems. - Vulnerability Management: Investigate, triage, prioritize, and remediate security vulnerabilities in application code and dependencies, taking ownership from discovery through patch development, release, and verification. - Threat Modeling and Secure Design: Review new features and security-sensitive architectural designs early in the development lifecycle, identify potential attack paths, assess risks, and recommend practical mitigations. - Kubernetes Security: Analyze Kubernetes attack surfaces, including container breakout risks, privilege escalation, role-based access control (RBAC), admission control, and security policy configurations. - Kubernetes Internals and Infrastructure Security: Apply a strong understanding of Kubernetes components, including the API server, controllers, admission mechanisms, and kubelet, to identify weaknesses and strengthen system security. - Code and Architecture Reviews: Participate in code reviews, design discussions, and technical reviews to identify security issues and promote robust engineering practices. - Secure Engineering Practices: Work with engineers across the organization to embed secure defaults, security checks, and threat-aware development practices into the
Full description, company and the link to apply — after you sign in. Sign in
Employer contacts (email/phone/telegram) are hidden from the public preview — send your CV, and we will connect you directly.
Urgent question? Message @termdocs