Engineering Tech Lead (Product Security)

Аналитика рынка

Стек

Бесплатно. Вход по почте.

Откликнуться

Загрузите резюме — мы свяжем вас с работодателем напрямую через нашу базу.

Описание

Accountabilities - Penetration Testing and Security Assessments: Conduct hands-on penetration testing of products and infrastructure to identify and exploit vulnerabilities, with particular focus on Kubernetes environments, container isolation, and cloud-native systems. - Vulnerability Management: Investigate, triage, prioritize, and remediate security vulnerabilities in application code and dependencies, taking ownership from discovery through patch development, release, and verification. - Threat Modeling and Secure Design: Review new features and security-sensitive architectural designs early in the development lifecycle, identify potential attack paths, assess risks, and recommend practical mitigations. - Kubernetes Security: Analyze Kubernetes attack surfaces, including container breakout risks, privilege escalation, role-based access control (RBAC), admission control, and security policy configurations. - Kubernetes Internals and Infrastructure Security: Apply a strong understanding of Kubernetes components, including the API server, controllers, admission mechanisms, and kubelet, to identify weaknesses and strengthen system security. - Code and Architecture Reviews: Participate in code reviews, design discussions, and technical reviews to identify security issues and promote robust engineering practices. - Secure Engineering Practices: Work with engineers across the organization to embed secure defaults, security checks, and threat-aware development practices into the

Полное описание, компания и ссылка на вакансию — после входа. Войти

Контакты работодателя (email/phone/telegram) скрыты из публичного превью — отправьте резюме, чтобы мы связали вас напрямую.