> Markdown version of [/jobs/ext/4153357-engineering-tech-lead-product-security](https://www.wearedevelopers.com/jobs/ext/4153357-engineering-tech-lead-product-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Engineering Tech Lead (Product Security)

- **Company:** Vcluster Labs
- **Location:** San Francisco, CA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Application Programming Interfaces (APIs), Software System Penetration Testing, Code Review, Open Source Technology, Role-Based Access Control, Software Technical Review, Software Security, Kubernetes
- **Published:** October 22, 2026
- **Apply:** https://startup.jobs/engineering-tech-lead-product-security-vcluster-labs-10519953

## About the Role

* Hands-on penetration testing: Experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise.
 * Kubernetes attack surface knowledge: Hands-on experience with container breakout, privilege escalation, RBAC, and policy best practices.
 * Kubernetes internals depth: Working knowledge of the API server, admission control, RBAC, controllers, and the kubelet, ideally from building controllers or operators with controller-runtime, Kubebuilder, or client-go.
 * Threat modeling and secure design: Experience threat modeling and reviewing designs for production systems, and explaining risk clearly to other engineers.
 * Vulnerability ownership: Experience investigating and fixing vulnerabilities in code you work on, including the CVE lifecycle, coordinated disclosure, and patch releases.
 * Production engineering in Go: Experience building and shipping production systems with Go as a primary language.

Bonus points for:

 * CKS certification: Certified Kubernetes Security Specialist.
 * Startup Experience: Experience at an early-stage organization where you function autonomously and strive towards building something great.

## Description

As an Engineering Tech Lead (Product Security), your role will include:

 * Penetration testing: Test our products and infrastructure for exploitable weaknesses, with a focus on Kubernetes and container isolation.
 * Owning vulnerability response: Triage, prioritize, and fix security issues in our code and dependencies through to a patched release.
 * Threat modeling new features: Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves.
 * Code and design reviews: Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team.
 * Improving security practices across engineering: Help engineers build secure defaults into the product., 2. Own the Outcome: We understand that our responsibility doesn't end when a task is checked off; it ends when the value is delivered. We connect our daily individual actions to the broader success of the company and our customers.
 3. Create Wow: We measure success by the experience we generate, both inside and outside the company. For our customers, this means impressive speed and intuitive experiences. For our team, this means going the extra mile to support one another and to continuously drive each other to new heights.
 4. Open Source, Open Mind: We are actively contributing to and maintaining open-source projects. Internally, we foster meritocracy - the strongest ideas win, no matter who or where they come from.
 5. Build Tomorrow's Standards, Intentionally: We don't just ship software; we define the state-of-the-art of tomorrow. We are fearless in tearing down old approaches to build something better, but we are disciplined in how we do it because we know our users rely on our technology to run mission-critical infrastructure platforms.