Senior Security Engineer

About the role

We are seeking a Senior Security Engineer to strengthen our software supply chain and container security through practical automation and hands‑on remediation. You will partner with engineering teams to harden Kubernetes workloads, improve CI/CD guardrails, and deliver tested fixes.

Key responsibilities

• Build and maintain hardened container base images for development and production.
• Implement Kubernetes security controls, including runtime monitoring, network policies, and admission controllers.
• Embed security checks and policy gates into CI/CD pipelines for fast, automated feedback.
• Secure software supply chain workflows across build systems, registries, and IaC.
• Write and maintain security automation utilities and services in Go.
• Triage vulnerabilities from pentests, SAST, DAST, and SCA, separating real risks from noise.
• Partner with engineering teams to prioritize issues and commit remediation patches and dependency upgrades.
• Automate alert grouping and first‑pass fixes using LLMs and Model Context Protocol integrations.

Required profile

• 3+ years of security engineering experience in SaaS environments with a DevSecOps focus.
• Proven ability to partner with engineering teams and drive remediation to completion.
• Hands‑on experience delivering hardened container images and Kubernetes security controls in production.
• Strong Go programming skills for building security tooling, CLIs, or services.
• Deep AWS security knowledge, including IAM and container services such as EKS and ECS.
• Practical Kubernetes security expertise, including network policies, runtime controls, and admission controllers.
• Strong vulnerability management skills across SAST, DAST, pentesting, and SCA.
• Terraform IaC skills for cloud and security configurations.
• Upper‑Intermediate English proficiency (B2).

Required skills

• Go (Golang)
• Kubernetes security controls
• AWS (IAM, EKS, ECS)
• Terraform
• CI/CD pipelines with security testing
• SAST, DAST, SCA
• Container image hardening
• Model Context Protocol (MCP) integration (nice to have)
• Supply chain security tools (SLSA, in‑toto, Sigstore/Cosign, SBOMs)

What we offer

• International projects with top brands
• Work with global, diverse teams
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to LinkedIn Learning library
• Global career opportunities
• Volunteer and community involvement opportunities
• Award‑winning culture recognized by Glassdoor, Newsweek and LinkedIn