Senior Security Engineer

We are looking for a Senior Security Engineer to strengthen the software supply chain and container security through practical automation and hands-on remediation. You will partner with engineering teams to harden Kubernetes workloads, improve CI/CD guardrails, and ship tested fixes.

Responsibilities

Build and maintain hardened container base images for development and production use Implement Kubernetes security controls including runtime monitoring, network policies, and admission controllers Embed security checks and policy gates into CI/CD pipelines to deliver fast, automated feedback Secure software supply chain workflows across build systems, registries, and infrastructure-as-code Write and maintain security automation utilities and services in Go Triage vulnerabilities from pentests, SAST, DAST, and SCA and separate real risks from noise Partner with engineering teams to prioritize issues and commit remediation patches and dependency upgrades Automate alert grouping and first-pass fixes using LLMs and Model Context Protocol integrations Review and test all generated code before merging changes into codebases Requirements 3+ years of security engineering experience in SaaS environments with Dev.

Sec. Ops and automation focus Proven leadership ability to partner with engineering teams and drive remediation to completion Hands-on project experience delivering hardened container images and Kubernetes security controls in production Strong Go (Golang) programming skills for building security tooling, CLIs, or services Solid CI/CD pipeline experience with automated testing and security checks Deep AWS security knowledge including IAM and container services such as EKS and ECS Practical Kubernetes security expertise including network policies, runtime controls, and admission controllers Strong vulnerability management skills across SAST, DAST, pentesting, and SCA with false-positive triage Terraform infrastructure-as-code skills for cloud and security configurations Strong communication skills to explain findings and provide actionable fixes to engineers Careful verification mindset when using AI coding assistants and LLM-driven automation Upper-Intermediate English proficiency (B2, Upper-Intermediate) Nice to have Model Context Protocol (MCP) integration experience for security automation Supply chain security experience with SLSA, in-toto, Sigstore/Cosign, and SBOMs (SPDX or CycloneDX) Microsoft Azure (AKS) experience securing container workloads Node.

js or TypeScript development experience