Description
Accountabilities
- Penetration Testing and Security Assessments: Conduct hands-on penetration testing of products and infrastructure to identify and exploit vulnerabilities, with particular focus on Kubernetes environments, container isolation, and cloud-native systems.
- Vulnerability Management: Investigate, triage, prioritize, and remediate security vulnerabilities in application code and dependencies, taking ownership from discovery through patch development, release, and verification.
- Threat Modeling and Secure Design: Review new features and security-sensitive architectural designs early in the development lifecycle, identify potential attack paths, assess risks, and recommend practical mitigations.
- Kubernetes Security: Analyze Kubernetes attack surfaces, including container breakout risks, privilege escalation, role-based access control (RBAC), admission control, and security policy configurations.
- Kubernetes Internals and Infrastructure Security: Apply a strong understanding of Kubernetes components, including the API server, controllers, admission mechanisms, and kubelet, to identify weaknesses and strengthen system security.
- Code and Architecture Reviews: Participate in code reviews, design discussions, and technical reviews to identify security issues and promote robust engineering practices.
- Secure Engineering Practices: Work with engineers across the organization to embed secure defaults, security checks, and threat-aware development practices into the
Full description, company and the link to apply — after you sign in.
Sign inEmployer contacts (email/phone/telegram) are hidden from the public preview —
send your CV, and we will connect you directly.