Engineering Tech Lead - Product Security (Kubernetes)

About the role

A partner company, represented here by Jobgether, is looking for an Engineering Tech Lead (Product Security) based in Switzerland. The role sits within a remote-first engineering team building Kubernetes and AI infrastructure for large-scale organizations. You will help secure infrastructure software by identifying vulnerabilities, running penetration tests and strengthening security across cloud-native products, bringing deep Kubernetes expertise to threat modeling, design reviews and vulnerability remediation.

Key responsibilities

• Conduct hands-on penetration testing of products and infrastructure, focusing on Kubernetes environments, container isolation and cloud-native systems.
• Investigate, triage, prioritize and remediate vulnerabilities in application code and dependencies, from discovery through patch development, release and verification.
• Review new features and security-sensitive designs early, identify attack paths and recommend mitigations.
• Analyze Kubernetes attack surfaces, including container breakout, privilege escalation, RBAC, admission control and security policies.
• Apply knowledge of Kubernetes internals (API server, controllers, admission mechanisms, kubelet) to strengthen system security.
• Take part in code and design reviews to spot security issues and promote secure engineering practices.
• Work with engineers to embed secure defaults, security checks and threat-aware development into the product lifecycle.
• Build and maintain production-grade software in Go, and explain vulnerabilities and remediation priorities to engineering stakeholders.

Required profile

• Hands-on experience running penetration tests and exploiting vulnerabilities in production systems.
• Deep practical expertise in Kubernetes security, including container isolation, container breakout, privilege escalation, RBAC and security policies.
• Experience with threat modeling, secure system design and reviewing production architectures for security risks.
• Proven ability to investigate and remediate vulnerabilities, including familiarity with the CVE lifecycle, coordinated vulnerability disclosure and security patch releases.
• Professional experience building and shipping production systems in Go.
• Strong software engineering fundamentals, clear communication of technical risks, and a proactive, independent approach to solving problems.

Required skills

• Strong understanding of Kubernetes internals (API server, admission control, controllers, RBAC, kubelet)
• Building Kubernetes controllers or operators with controller-runtime, Kubebuilder or client-go is highly relevant
• Go as a primary programming language
• Nice to have: CKS certification, early-stage startup experience, open-source and cloud-native project experience

What we offer

• Annual salary for Canada-based candidates of CA$140,000 to CA$200,000 depending on experience and location
• Equity and bonus opportunities
• Health, dental, vision and life insurance, with plans for eligible dependents
• Flexible schedule and remote-first working arrangements
• Collaboration with a distributed team of infrastructure engineers