高级软件工程师（产品安全）
Senior Software Engineer (Product Security)
vCluster Labs 正在寻找一位专注于产品安全的高级软件工程师，帮助我们从零开始构建安全的基础设施软件。你将与工程团队的其他成员一起设计、构建和维护生产功能，同时通过审查安全敏感的设计、对新功能进行威胁建模、调查漏洞，并在平台演进过程中帮助团队做出合理的安全决策，为整个产品带来安全视角。
运营安全工具和合规性不是主要目标；我们需要一位经验丰富的工程师，能够深入我们的代码库和架构中，将安全性融入产品本身，并作为我们产品的安全专家。
作为高级软件工程师（产品安全），你的职责包括：
- 构建生产功能：与工程团队的其他成员一起设计、构建和维护生产功能。当没有安全工作时，你将负责路线图上的功能。
- 负责漏洞响应：对我们的代码和依赖项中的安全问题进行分类、优先级排序并修复，直至发布补丁版本。
- 对新功能进行威胁建模：早期审查安全敏感的设计，识别风险，并在平台演进过程中帮助团队做出合理的安全决策。
- 代码和设计评审：参与代码评审、设计评审和技术讨论，与其他工程团队成员合作。
- 提升工程团队的安全实践：帮助工程师将安全默认设置融入产品中。
如果你具备以下条件，这个职位可能适合你：
- Go 语言的生产工程经验：使用 Go 作为主要语言构建和发布生产系统的经验。
- Kubernetes 内部机制的深入了解：对 API 服务器、准入控制、RBAC、控制器和 kubelet 有工作知识，最好是通过使用 controller-runtime、Kubebuilder 或 client-go 构建控制器或操作符的经验。
- Kubernetes 攻击面知识：在容器逃逸、权限提升、RBAC 和策略最佳实践方面有实际经验。
- 威胁建模和安全设计：有对生产系统进行威胁建模和审查设计的经验，并能向其他工程师清晰地解释风险。
- 漏洞责任：有调查和修复你所工作的代码中的漏洞的经验，包括 CVE 生命周期、协调披露和补丁发布。
加分项：
- CKS 认证：认证的 Kubernetes 安全专家
查看英文原文
vCluster Labs is looking for a Senior Software Engineer focused on Product Security to help us build secure infrastructure software from the ground up. You'll design, build, and maintain production features alongside the rest of the engineering team, while bringing a security perspective to the broader product by reviewing security-sensitive designs, threat modeling new features, investigating vulnerabilities, and helping teams make sound security decisions as the platform evolves.
Operating security tooling and compliance are not the primary goals; we need an experienced engineer who can work deeply in our codebase and architecture, build security into the product itself, and serve as the security expert for our product.
As a Senior Software Engineer (Product Security), your role will include:
- Building production features: Design, build, and maintain production features alongside the rest of the engineering team. When there's no security work in the queue, you work on roadmap features.
- Owning vulnerability response: Triage, prioritize, and fix security issues in our code and dependencies through to a patched release.
- Threat modeling new features: Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves.
- Code and design reviews: Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team.
- Improving security practices across engineering: Help engineers build secure defaults into the product.
This role could be a fit for you if you bring:
- Production engineering in Go: Experience building and shipping production systems with Go as a primary language.
- Kubernetes internals depth: Working knowledge of the API server, admission control, RBAC, controllers, and the kubelet, ideally from building controllers or operators with controller-runtime, Kubebuilder, or client-go.
- Kubernetes attack surface knowledge: Hands-on experience with container breakout, privilege escalation, RBAC, and policy best practices.
- Threat modeling and secure design: Experience threat modeling and reviewing designs for production systems, and explaining risk clearly to other engineers.
- Vulnerability ownership: Experience investigating and fixing vulnerabilities in code you work on, including the CVE lifecycle, coordinated disclosure, and patch releases.
Bonus points for:
- CKS certification: Certified Kubernetes Security Specialist.
- Startup Experience: Experience at an early-stage organization where you function autonomously and strive towards building something great.
ABOUT VCLUSTER LABS
We're the #1 platform for AI infrastructure, trusted by the world's fastest-growing AI cloud builders. We're a venture-backed startup that's raised over $28M from top-tier investors including Khosla Ventures (first investor in OpenAI, GitLab, Stripe, and DoorDash), and we're in a hyper-growth phase looking for motivated people to join our team. Our headquarters are in San Francisco (Salesforce Tower), but our team is distributed around the globe with a remote-first culture.
We give AI Cloud providers and AI factories a hyperscaler-like experience on their own GPU infrastructure. Our platform runs the full stack an operator needs, from bare metal provisioning and node lifecycle management up through managed Kubernetes, Slurm, Ray, and inference clusters, so they can turn raw GPUs into cluster products they can sell in days instead of spending 12+ months building it themselves. Today we power over 100,000 GPUs and 1 million CPUs across 50+ AI clouds and Fortune 500 companies, backed by a team of 40+ infrastructure engineers who build alongside our customers rather than just shipping them software.
We're the company behind vCluster, the open source technology for tenant isolation on Kubernetes, with 11,000+ GitHub stars and 40M+ tenant clusters created since 2021. Open source is part of our DNA. At KubeCon North America 2025, we launched our Infrastructure Tenancy Platform for AI, a Kubernetes-native framework built for running AI, ML, and GPU-intensive workloads anywhere, with an NVIDIA-validated reference architecture for DGX systems.
Benefits
We offer the following benefits:
- Competitive Salary: We offer a competitive compensation package, including equity.
- Premium Insurance: Health, dental, vision, and life Insurance, including plans for you and eligible dependents (benefits vary depending on country).
- Flexible Working Schedule: You have a doctor’s appointment or need to head to the supermarket to get groceries at 2pm? We won’t have an issue with that. To us, results matter more than clocking in and out at the same time every day.
- Workplace Flexibility: We’re very flexible about where you work. We know things can change in life and we’re happy to adjust the work environment for you along the way.
CULTURE & VALUES
At vCluster Labs, we value and stand for:
1. Make it Happen: We have a relentless bias for action and the grit to push through obstacles. We do whatever it takes to figure it out, put in the work, and ruthlessly prioritize the actions that drive measurable impact for the business.
2. Own the Outcome: We understand that our responsibility doesn't end when a task is checked off; it ends when the value is delivered. We connect our daily individual actions to the broader success of the company and our customers.
3. Create Wow: We measure success by the experience we generate, both inside and outside the company. For our customers, this means impressive speed and intuitive experiences. For our team, this means going the extra mile to support one another and to continuously drive each other to new heights.
4. Open Source, Open Mind: We are actively contributing to and maintaining open-source projects. Internally, we foster meritocracy — the strongest ideas win, no matter who or where they come from.
5. Build Tomorrow’s Standards, Intentionally: We don't just ship software; we define the state-of-the-art of tomorrow. We are fearless in tearing down old approaches to build something better, but we are disciplined in how we do it because we know our users rely on our technology to run mission-critical infrastructure platforms.