Staff Security Engineer

Define and improve standards, guardrails, and reference patterns for CSPM, container image security, runtime integrity enforcement, and admission control.

Tune and operate policy-as-code frameworks (Kyverno, OPA/Rego) to enforce security baselines across K8s clusters at scale.

Deploy and manage containerized security tooling - NTA sensors, NDR, and runtime threat detection - across global data centers.

Design and implement Kubernetes hardening: RBAC, network policies, pod security standards, and secrets management.

Strong practical experience securing production K8s clusters (EKS, AKS, GKE, or self-managed), including: pod security standards, network policy design, RBAC architecture, admission control…

Endpoint XDR or equivalent Host-based Intrusion Detection System (HIDS) experience.

Built or operated container runtime security tooling (Falco, Sysdig, Aqua, Prisma Cloud Compute, or equivalent) in production environments.

Experience writing admission controllers, OPA/Gatekeeper policies, Kyverno policies, or equivalent policy-as-code for container environments.