Engineering Tech Lead (Product Security)
集团实验室正在寻找专注于产品安全的工程技术领导者,帮助我们从头开始构建安全基础设施软件。你将把透测试和深入 Kubernetes 的专业知识带到我们的产品中,同时审查对安全敏感的设计,威胁模型新功能,调查漏洞,并帮助团队随着平台的发展做出健全的安全决策。作为工程技术领导 (产品安全),你的角色将包括:- 透测量:检查我们的产品和基础设施以求可利用的弱点,重点关注 Kubernetes 和容器隔离。- 拥有漏洞响应:试验,优先考虑和解决我们代码和依赖性中的安全问题,直到修复版本。- 威胁建模新功能:提前审查对安全敏感的设计,识别风险,并帮助团队随着平台发展做出健全的安全决策。- 代码和设计评审:与工程团队其他成员参与代码评论,设计评价和技术讨论。- 在整个工程中改善安全实践:帮助工程师建立安全默认产品。如果你带来:- 手动透:经历发现和测试生产系统中的漏洞,拥有深入的 Kubernetes 专业知识,这项角色可能适合你。- Kubernetes 攻击表面知识:实践经验,集装箱突破,特权升级,RBAC 和政策最佳做法。- Kubernets 内部深度:API 服务器实操了解,接入控制,RBAc,控制者和 Kubelet,理想情况下是从构建控制者或运营商的控制器运行时间,Kubebuilder 或客户端去。-威胁模型和安全设计:对生产系统的威胁模型和审查,并向其他工程师清楚解释风险。- 漏洞所有权:研究和修复你正在处理的代码中的漏洞,包括 CVE 生命周期,协调披露和补丁发布。- 制作工程在 Go:使用 Go 作为主要语言构建和运输生产系统的经验。奖金点:- CKS 认证:Cubernetes 安全专家认证。- 初创经验:在早期阶段组织的经验,你自主工作并努力建立伟大的东西。ABOUT VCLUSTER LABS 我们是世界所信赖的 AI 基础设施的第一平台
查看英文原文
vCluster Labs is looking for an Engineering Tech Lead focused on Product Security to help us build secure infrastructure software from the ground up. You'll bring hands-on penetration testing and deep Kubernetes expertise to our products, while reviewing security-sensitive designs, threat modeling new features, investigating vulnerabilities, and helping teams make sound security decisions as the platform evolves.
As an Engineering Tech Lead (Product Security), your role will include:
- Penetration testing: Test our products and infrastructure for exploitable weaknesses, with a focus on Kubernetes and container isolation.
- Owning vulnerability response: Triage, prioritize, and fix security issues in our code and dependencies through to a patched release.
- Threat modeling new features: Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves.
- Code and design reviews: Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team.
- Improving security practices across engineering: Help engineers build secure defaults into the product.
This role could be a fit for you if you bring:
- Hands-on penetration testing: Experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise.
- Kubernetes attack surface knowledge: Hands-on experience with container breakout, privilege escalation, RBAC, and policy best practices.
- Kubernetes internals depth: Working knowledge of the API server, admission control, RBAC, controllers, and the kubelet, ideally from building controllers or operators with controller-runtime, Kubebuilder, or client-go.
- Threat modeling and secure design: Experience threat modeling and reviewing designs for production systems, and explaining risk clearly to other engineers.
- Vulnerability ownership: Experience investigating and fixing vulnerabilities in code you work on, including the CVE lifecycle, coordinated disclosure, and patch releases.
- Production engineering in Go: Experience building and shipping production systems with Go as a primary language.
Bonus points for:
- CKS certification: Certified Kubernetes Security Specialist.
- Startup Experience: Experience at an early-stage organization where you function autonomously and strive towards building something great.
ABOUT VCLUSTER LABS
We're the #1 platform for AI infrastructure, trusted by the world's fastest-growing AI cloud builders. We're a venture-backed startup that's raised over $28M from top-tier investors including Khosla Ventures (first investor in OpenAI, GitLab, Stripe, and DoorDash), and we're in a hyper-growth phase looking for motivated people to join our team. Our headquarters are in San Francisco (Salesforce Tower), but our team is distributed around the globe with a remote-first culture.
We give AI Cloud providers and AI factories a hyperscaler-like experience on their own GPU infrastructure. Our platform runs the full stack an operator needs, from bare metal provisioning and node lifecycle management up through managed Kubernetes, Slurm, Ray, and inference clusters, so they can turn raw GPUs into cluster products they can sell in days instead of spending 12+ months building it themselves. Today we power over 100,000 GPUs and 1 million CPUs across 50+ AI clouds and Fortune 500 companies, backed by a team of 40+ infrastructure engineers who build alongside our customers rather than just shipping them software.
We're the company behind vCluster, the open source technology for tenant isolation on Kubernetes, with 11,000+ GitHub stars and 40M+ tenant clusters created since 2021. Open source is part of our DNA. At KubeCon North America 2025, we launched our Infrastructure Tenancy Platform for AI, a Kubernetes-native framework built for running AI, ML, and GPU-intensive workloads anywhere, with an NVIDIA-validated reference architecture for DGX systems.
Benefits
We offer the following benefits:
- Competitive Salary: We offer a competitive compensation package, including equity.
- Premium Insurance: Health, dental, vision, and life Insurance, including plans for you and eligible dependents (benefits vary depending on country).
- Flexible Working Schedule: You have a doctor’s appointment or need to head to the supermarket to get groceries at 2pm? We won’t have an issue with that. To us, results matter more than clocking in and out at the same time every day.
- Workplace Flexibility: We’re very flexible about where you work. We know things can change in life and we’re happy to adjust the work environment for you along the way.
CULTURE & VALUES
At vCluster Labs, we value and stand for:
1. Make it Happen: We have a relentless bias for action and the grit to push through obstacles. We do whatever it takes to figure it out, put in the work, and ruthlessly prioritize the actions that drive measurable impact for the business.
2. Own the Outcome: We understand that our responsibility doesn't end when a task is checked off; it ends when the value is delivered. We connect our daily individual actions to the broader success of the company and our customers.
3. Create Wow: We measure success by the experience we generate, both inside and outside the company. For our customers, this means impressive speed and intuitive experiences. For our team, this means going the extra mile to support one another and to continuously drive each other to new heights.
4. Open Source, Open Mind: We are actively contributing to and maintaining open-source projects. Internally, we foster meritocracy — the strongest ideas win, no matter who or where they come from.
5. Build Tomorrow’s Standards, Intentionally: We don't just ship software; we define the state-of-the-art of tomorrow. We are fearless in tearing down old approaches to build something better, but we are disciplined in how we do it because we know our users rely on our technology to run mission-critical infrastructure platforms.