Engineering Tech Lead; Product Security

vCluster Labs is looking for an Engineering Tech Lead focused on Product Security to help us build secure infrastructure software from the ground up. You’ll bring hands-on penetration testing and deep Kubernetes expertise to our products, while reviewing security-sensitive designs, threat modeling new features, investigating vulnerabilities, and helping teams make sound security decisions as the platform evolves.

• Penetration testing:
  Test our products and infrastructure for exploitable weaknesses, with a focus on Kubernetes and container isolation.
• Owning vulnerability response:
  Triage, prioritize, and fix security issues in our code and dependencies through to a patched release.
• Threat modeling new features:
  Review security-sensitive designs early, identify risks, and help teams make sound security decisions as the platform evolves.
• Code and design reviews:
  Participate in code reviews, design reviews, and technical discussions with the rest of the engineering team.
• Improving security practices across engineering:
  Help engineers build secure defaults into the product.

• Hands‑on penetration testing:
  Experience finding and exploiting vulnerabilities in production systems, with deep Kubernetes expertise.
• Kubernetes attack surface knowledge:
  Hands‑on experience with container breakout, privilege escalation, RBAC, and policy best practices.
• Kubernetes internals depth:
  Working knowledge of the API server, admission control, RBAC, controllers, and the kubelet, ideally from building controllers or operators with controller‑runtime, Kubebuilder, or client‑go.
• Threat modeling and secure design:
  Experience threat modeling and reviewing designs for production systems, and explaining risk clearly to other engineers.
• Vulnerability ownership:
  Experience investigating and fixing vulnerabilities in code you work on, including the CVE lifecycle, coordinated disclosure, and patch releases.
• Production engineering in Go:
  Experience building and shipping production systems with Go as a primary language.

• CKS certification:
  Certified Kubernetes Security Specialist.
• Startup
  
  Experience:
  
  Experience at an early‑stage organization where you function autonomously and strive towards building something great.

We’re the #1 platform for AI infrastructure, trusted by the world’s fastest-growing AI cloud builders. We’re a venture‑backed startup that’s raised over $28M from top‑tier investors including Khosla Ventures (first investor in OpenAI, Git Lab, Stripe, and Door Dash), and we’re in a hyper‑growth phase looking for motivated people to join our team. Our headquarters are in San Francisco (Salesforce Tower), but our team is distributed around the globe with a remote‑first culture.

We give AI Cloud providers and AI factories a hyperscaler‑like experience on their own GPU infrastructure. Our platform runs the full stack an operator needs, from bare metal provisioning and node lifecycle management up through managed Kubernetes, Slurm, Ray, and inference clusters, so they can turn raw GPUs into cluster products they can sell in days instead of spending 12+ months building it themselves.

Today we power over 100,000 GPUs and 1 million CPUs across 50+ AI clouds and Fortune 500 companies, backed by a team of 40+ infrastructure engineers who build alongside our customers rather than just shipping them software. We’re the company behind vCluster, the open source technology for tenant isolation on Kubernetes, with 11,000+ Git Hub stars and 40M+ tenant clusters created since 2021.

Open source is part of our DNA. At Kube Con North America 2025, we launched our Infrastructure Tenancy Platform…