Sr. Application Security Engineer

Sr. Application Security Engineer – vCluster Labs

As a Sr. Application Security Engineer at vCluster Labs, you are the architect of trust in our diverse ecosystem. In this role, you will be responsible for the end-to-end security of our product, ensuring that vCluster remains the de facto standard for secure Kubernetes multi‑tenancy. You will define the security standards that allow our customers to run high‑privileged workloads without fear, building in‑depth strategies that span our entire codebase and infrastructure.

As a Sr. Application Security Engineer, your role will include:

• Core Product Security:
  Perform deep‑dive security reviews of our core Go‑based applications and Kubernetes controllers, as well as the frontend user interface, with a targeted focus on avoiding privilege escalation within our multi‑tenant architecture.
• Threat Modeling:
  Lead the threat modeling process for new features, proactively identifying risks associated with shared GPU resources and multi‑cloud environments.
• Automated Security:
  Shift left by integrating security checks into our CI and developer workflows, optimizing for speed to avoid bottlenecks. You will also manage automated and manual scanning of our entire product stack.
• Vulnerability Management:
  Own the lifecycle of security vulnerabilities from discovery to remediation, triaging external and internal reports, driving resolution of critical issues across engineering, and communicating with stakeholders.
• Feature Development:
  Collaborate on new feature ideas and development, many of which are security‑oriented—e.g., container breakouts and isolation in constrained environments.
• Developer Training:
  Make complex topics easier to understand for all engineers, including new attack vectors and secure coding concepts.

This role could be a fit for you if you bring:

• Experience:
  
  5+ years in Application or Product Security, focused on containerized environments.
• Kubernetes Depth:
  Deep understanding of Kubernetes architecture, RBAC, and container runtime security, plus the specific risks of multi‑tenancy.
• Code Proficiency:
  Comfortable reading and writing Go, spotting vulnerabilities in PRs beyond automated tools.
• Modern Tech Mindset:
  Thrive in fast‑paced, cutting‑edge environments and excited to solve novel problems related to AI and multi‑tenant infrastructure.
• Cognitive Flexibility:
  View feedback as a learning mechanism, not critique, and understand our customers’ unique needs and concerns.

Bonus points for:

• Certifications:
  
  CKS (Certified Kubernetes Security Specialist) or OSCP.
• AI/GPU Context:
  Experience securing AI workloads or GPU cloud infrastructure.
• Automation
  
  Skills:
  
  Writing custom security tooling or automation scripts in Python or Go.
• Documentation:
  Willingness to contribute to public‑facing security documentation and our "Trust Center" to help customers navigate compliance.

About vCluster Labs:

We are a venture‑backed tech startup striving to be the leading force in enabling platform engineers. We raised +$30M from top‑tier VCs such as Khosla Ventures and are in a hyper‑growth phase looking for motivated people to complement our team. Our headquarters are in San Francisco (Salesforce Tower), but our team is distributed around the globe and we have a remote‑first work culture.

We are the company behind vCluster, an open‑source technology for virtualizing Kubernetes (+10k Git Hub stars). Open source is part of our DNA.

Our commercial product adoption has grown extremely fast (multi‑million dollar revenue) and our customer base includes some of the biggest companies in the world, including 6 Global Fortune 500 firms and fast‑growing tech unicorns.

Benefits:

• Competitive Salary:
  Competitive compensation package, including equity.
• Platinum‑Level Insurance:
  Health, dental, vision, and life insurance for you and eligible dependents (benefits vary by country).
• Flexible Working
  
  Schedule:
  
  Accommodate appointments or personal errands—results matter more than clocking in.
• Workplace Flexibility:
  Flexible about where you work; we adjust the environment as life changes.

Culture & Values:

• Open Source, Open Mind:
  Actively contributing and maintaining open‑source projects; meritocracy within the team.
• Build Tomorrow’s Standards, Intentionally:
  Define state‑of‑the‑art solutions, disciplined yet innovative to support mission‑critical infrastructure.
• Create Wow:
  Measure success by the experience we generate for customers and team, going the extra mile.
• Own the Outcome:
  Responsibilities extend beyond task completion to delivering value; link daily actions to company and customer success.

Compensation Range: $150K – $190K