We are hiring for a
Senior Container Security Engineer Kubernetes, GCP & DevSecOps.
This role focuses on securing enterprise container platforms, cloud-native infrastructure, and software supply chains.
The ideal candidate has 8+ years of experience with GCP, Kubernetes, container security, SBOM management, and security automation.
What You Bring
- 7+ years of experience with Google Cloud Platform (GCP)
- Strong hands-on experience with Kubernetes, GKE, GDC, AKS, Docker, and Podman
- Expertise in container image security, lifecycle management, OCI registries, and vulnerability remediation
- Experience with SBOM generation and management using SPDX and CycloneDX
- Knowledge of image signing, Cosign, provenance, attestations, and admission policies
- Experience with Aqua Security, Wiz, Trivy, Syft, or Grype
- Strong knowledge of Terraform, CI/CD, GitHub Actions, and Jenkins
- Experience with Helm Charts, Ingress Controllers, Network Policies, and Service Mesh
- Scripting skills in Python, Go, Bash, or Shell
- Knowledge of cloud security, IAM, encryption, PKI, and network security
- Familiarity with Prometheus, Grafana, and Datadog
What You'll Do
- Design, deploy, and secure Kubernetes-based container environments
- Manage container image lifecycle, registries, and approved base images
- Integrate SBOM generation, image scanning, signing, and security policies into CI/CD pipelines
- Automate infrastructure provisioning and security controls using Terraform
- Conduct vulnerability assessments, security audits, and remediation
- Implement runtime protection, monitoring, and incident response practices
- Define container security standards and guide development and operations teams
- Support disaster recovery and business continuity planning
Nice to have
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Security Specialist (CKS)
- Terraform Associate
- CISSP or CISM certification
- Experience with Google Cloud Run, GKE Autopilot, or Anthos Service Mesh
