Senior Security Engineer

We are looking for aLead-level Security Engineer to strengthen container and supply chain security through automation and hands-on remediation. You will harden container images, secure Kubernetes workloads, and build tooling that turns scan results into tested fixes.

Responsibilities

• Build and maintain hardened container base images with automated testing for development and production use
• Implement Kubernetes security controls including runtime monitoring, network policies, and admission policies
• Secure software supply chain workflows across build pipelines, registries, and infrastructure configuration
• Create and evolve security automation tools and services using Go
• Triage vulnerabilities from pentests, SAST, DAST, and SCA to separate real risk from noise
• Partner with engineering teams to prioritize findings and commit remediation patches and dependency upgrades
• Automate alert grouping and first-pass fix drafting using Gen AI assisted development and MCP-based integrations

Requirements

• 5+ years of security engineering experience in DevSecOps and security automation
• Strong leadership skills to partner with engineering teams and drive remediation work to completion
• Proven project ownership to write, test, and commit patches rather than only filing tickets
• Advanced Go (Golang) skills to build security tooling, CLIs, and services
• Strong AWS security knowledge including IAM and container services such as EKS and ECS
• Solid CI/CD pipeline experience with automated testing and security checks
• Deep container security expertise including hardened base images and attack surface reduction
• Hands-on Kubernetes security skills including network policies, runtime controls, and admission policies
• Strong vulnerability management skills across SAST, DAST, SCA, and pentest findings
• Practical infrastructure-as-code skills with Terraform for secure configurations
• Applied Gen AI assisted development skills with disciplined review and testing of generated code
• Upper-Intermediate English skills (B2) for clear written and verbal collaboration

Nice to have

• Model Context Protocol (MCP) integration experience for security automation
• Microsoft Azure experience securing container platforms such as AKS
• Node.js development experience supporting security tooling
• Supply chain security expertise with SLSA, in-toto, Sigstore/Cosign, and SBOMs