Kubernetes Engineer

We are seeking an experienced Kubernetes Engineer to support secure software development initiatives across modern Dev Ops environments. This role focuses on identifying, remediating, and preventing application vulnerabilities while embedding security practices into CI/CD pipelines and cloud-native environments.

• Identify, triage, and remediate vulnerabilities such as injection flaws, insecure deserialization, and misconfigurations.
• Integrate and manage SAST and DAST tools within CI/CD pipelines.
• Collaborate with development teams to enforce secure coding standards and remediate vulnerabilities.
• Design and implement guardrails for AI-powered applications (e.g., prompt injection, model inversion, data poisoning mitigation).
• Conduct security assessments and provide actionable remediation guidance.
• Develop and maintain security policies, procedures, and documentation.
• Build and maintain CI/CD pipelines (Cloud Bees, Jenkins, Buddy, Urban Code, etc.).
• Develop automation solutions using Python, Java, or Power Shell.
• Implement and manage Git Hub Advanced Security (code scanning, secret scanning, Dependabot).
• Work with APIs, endpoints, and databases to create integrated security solutions.
• Support Dev Ops workflows using Git Hub, Azure Dev Ops, and advanced automation.
• Work with Azure Resource Manager (ARM), Azure CLI, Power Shell, Shell scripts, Python, and related scripting tools.
• Mentor junior engineers and promote security awareness across teams.
• Collaborate in Agile environments.

• Minimum 4+ years of experience in Application Security or Software Engineering with a security focus.
• Minimum 1+ year of automation development using Python, Java, or Power Shell.
• CompTIA Security+ certification (or equivalent).
• Strong understanding of OWASP Top 10 vulnerabilities.

• Experience with SAST/DAST tools (e.g., Veracode, Git Hub).
• Familiarity with OWASP Dependency-Check and third-party risk management tools.
• Experience with AI/GenAI risk mitigation strategies.
• Cloud-native security experience (AWS, Azure, GCP).
• Experience combining data from APIs, endpoints, and databases.
• Knowledge of container security and Infrastructure-as-Code (IaC) scanning.
• Certifications such as CISSP, OSCP, or GIAC.
• Strong analytical, communication, and stakeholder engagement skills.
• Experience working in globally distributed teams.