Senior Attack Engineer, Kubernetes

Lead research and product development for offensive security capabilities focused on Kubernetes. The role follows realistic attack paths from a compromised workload or identity through a cluster and connected cloud environments, turning validated research into safe, repeatable assessments with clear evidence of impact.

• Research security weaknesses across clusters, workloads, identities, configurations, and cloud-connected environments.
• Build production-quality Python capabilities that model realistic attacker starting points, including access to a pod or workload.
• Develop and validate paths involving permissions, service accounts, credentials, secrets, network access, cluster boundaries, and managed Kubernetes integrations.
• Test whether weaknesses produce meaningful impact, including safe validation and negative testing.
• Set technical plans, prioritize research, and coordinate delivery with product, platform, and engineering partners.
• Integrate findings into assessment and results workflows; document methods and limitations, review designs, and mentor teammates.

• Deep hands-on experience with Kubernetes security and offensive testing of containerized environments.
• Expert knowledge of Kubernetes architecture, particularly authorization, service accounts, workloads, and cluster boundaries.
• Strong Python engineering skills and experience converting security research into reliable automation.
• Background in penetration testing, red teaming, vulnerability research, container security, or offensive security tooling.
• Ability to lead complex technical work, make sound trade-offs, and explain attack paths and impact to different audiences.
• A safety-focused approach that distinguishes theoretical weaknesses from reproducible, actionable findings.

The source describes the organization as remote and lists a base salary range of $206,278-$242,680, stock options for full-time employees, health and dental coverage, flexible vacation, and parental leave.