Product Security Engineer, Mirantis

• At least 5 years of experience in application security, penetration testing, or a related role, with a focus on Kubernetes or containerized environments
• Deep understanding of Kubernetes architecture, including components like kubelet, kube-apiserver, etcd, and networking within Kubernetes clusters
• Experience securing containerized applications, Kubernetes workloads, and orchestration platforms
• Proven ability to conduct penetration tests in Kubernetes and containerized environments, identifying and remediating vulnerabilities

Desirable

• Perform penetration testing on Kubernetes workloads and containerized environments, identifying and addressing vulnerabilities specific to these systems
• Strengthen the security of Kubernetes clusters by evaluating configurations, implementing best practices (e.g., RBAC, network policies), and addressing runtime security concerns
• Prioritize and remediate vulnerabilities across Kubernetes clusters and related components, working closely with engineering teams to deliver secure solutions
• Help establish secure coding practices and provide feedback on fixes for identified vulnerabilities
• Drive efforts to meet and maintain industry security certifications (e.g., SOC 2, ISO 27001) and ensure alignment with Kubernetes security benchmarks
• Assist with audit preparations by providing technical expertise and documentation
• Work with product and engineering teams to embed security throughout the development lifecycle
• Support sales and customer teams by explaining security features and addressing customer concerns about security or compliance
• Create and maintain a long-term security strategy that addresses emerging threats and aligns with company-wide security initiatives
• Monitor developments in Kubernetes security and implement relevant improvements