Source Job

$105,000–$150,000/yr
South Africa

  • Conduct hands-on penetration testing and security assessments for Kubernetes and cloud-native products.
  • Own vulnerability management from discovery through patch development, release, and verification.
  • Guide secure engineering practices and threat modeling across the product lifecycle.

Kubernetes Go Penetration Testing Threat Modeling Cloud Security

20 jobs similar to Engineering Tech Lead (Product Security)

Jobs ranked by similarity.

US

  • Design, build, and maintain production features with a strong product security focus.
  • Own vulnerability response from initial triage through coordinated disclosure and patched releases.
  • Conduct threat modeling and security-sensitive design reviews to help engineers make informed security decisions.

This company builds cloud-native infrastructure software with a strong focus on Kubernetes security. They operate as a remote-first, globally distributed team that values engineering ownership and autonomous work.

US

  • Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
  • Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
  • Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.

Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins, combining custodial wallets, payment orchestration, and issuance. As a 40-person startup, we operate through our own regulated entities with built-in compliance and risk controls.

UK

  • Lead and grow a team of security engineers focused on protecting cloud-native environments and CI/CD pipelines.
  • Drive technical strategy, threat modeling, and security automation across multi-cloud infrastructure.
  • Partner with engineering and DevOps teams to embed secure-by-design principles and manage vulnerability and supply chain security.

Wiz is a cybersecurity company that provides a cloud security platform connecting code, cloud, and runtime to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and now powered by Google, with a culture that values world-class talent.

UK Unlimited PTO 18w maternity 12w paternity

  • Set product security direction across major products and platforms, leading cross-functional initiatives.
  • Embed security by design into roadmaps and engineering work, with high autonomy.
  • Drive security assurance programs and mentor engineers across the organization.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. They are a venture-backed company with Fortune 500 clients and a remote-first culture.

$182,800–$215,000/yr
US

  • Own and improve the organization's SIEM, including threat detection, alert tuning, and incident response.
  • Conduct security architecture reviews, code reviews, and infrastructure assessments to identify and remediate risks.
  • Build scalable security processes and integrate security practices into development workflows across cloud and container environments.

This company is a fast-moving technology organization focused on building secure and scalable software systems. It fosters a high-ownership, remote-first culture where experienced professionals collaborate with high-caliber engineering teams.

Brazil

  • Own the network pillar of Sezzle's zero-trust program, including east-west segmentation and identity-aware transport across Kubernetes and AWS.
  • Implement network policies as code, mTLS, and telemetry to ensure every connection is explicit and attributable.
  • Collaborate with security, platform, and IAM teams to deliver private access and maintain security controls.

Sezzle is a fintech company on a mission to financially empower the next generation through interest-free installment plans and innovative payment solutions. The company fosters a dynamic, innovative culture with a diverse team of engineers, data enthusiasts, and creative thinkers.

France 4w paternity

  • Bridge security and platform engineering to make infrastructure secure by design and provable at audit.
  • Own infrastructure vulnerability management and automate security guardrails on Azure and Kubernetes.
  • Build detection as code, widen SIEM coverage, and eliminate long-lived credentials.

360Learning is a collaborative learning platform for turning internal experts into champions for employee, customer, and partner growth. Founded in 2013, it has 400+ employees across North America and EMEA with an inclusive Convexity culture.

US

  • Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
  • Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
  • Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.

Wiz is redefining security for the AI era, enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups ever, we are trusted by over 65% of the Fortune 100 and scan over 230 billion files daily, with a culture that values world-class talent and is now powered by Google.

North America

  • Design, build, and operate production Kubernetes platforms, owning cluster architecture, networking, reliability, and security.
  • Troubleshoot complex infrastructure issues across Kubernetes, Linux, networking, and cloud environments, and improve observability and automation.
  • Take ownership of critical infrastructure initiatives, incident response, and mentorship while working autonomously in a remote-first environment.

Our partner is a technology company building and operating large-scale Kubernetes platforms and complex production infrastructure. It is a remote-first organization with a focus on autonomy, technical ownership, and collaboration across North America and Latin America.

$54,000–$72,360/yr
Europe 5w PTO

  • Design and implement secure-by-default workflows for cloud production environments.
  • Strengthen Kubernetes, CI/CD security, and identity management across the platform.
  • Collaborate with engineers to improve reliability, observability, and disaster recovery.

The hiring company is a remote-first platform organization focused on building reliable infrastructure and protecting sensitive data across multiple countries. Their culture emphasizes collaboration, developer experience, and evidence-based assessment.

North America

  • Partner with Fortune 500 customers to address security concerns and accelerate platform adoption.
  • Develop security reference architectures and perform threat modeling for ServiceNow products and AI services.
  • Lead security deep dives covering cloud-native architectures, identity, encryption, and AI security controls.

ServiceNow is an AI platform that helps enterprises automate workflows and reinvent business processes. The company serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent work together.

US Unlimited PTO

  • Partner with engineering to identify and mitigate security risks before launch, building secure frameworks and libraries that make control adoption easy.
  • Own identity and secrets management, including credential issuance, rotation, and workload authentication across cloud and Kubernetes environments.
  • Harden cloud security controls and build security models for AI agents with permission boundaries and tenant isolation.

Fieldguide builds software that automates assurance and audit work for cybersecurity, privacy, and financial audits, helping businesses enable trust. They are a remote-first company backed by top investors and trusted by over 50 of the top 100 accounting and consulting firms, with a values-driven culture.

US Unlimited PTO

  • Design and build Kubernetes tooling and APIs for orchestrating virtual machine workloads.
  • Develop tooling to inspect, convert, and package VM images for secure, air-gapped environments.
  • Collaborate with Product, UX, and Mission Heroes to turn operational needs into reliable product capabilities.

Defense Unicorns delivers secure software delivery solutions for mission-focused customers, streamlining deployment so they can focus on critical challenges. The team is composed of innovators, software engineers, and veterans with decades of experience across the federal market.

Canada

  • Strengthen platform security by remediating vulnerabilities, hardening container images, and enforcing policy-as-code.
  • Manage Kubernetes infrastructure, authentication services, and AWS cloud operations at scale.
  • Automate infrastructure with Python, Go, Terraform, and AI-assisted workflows to improve reliability.

The company provides secure, reliable, and scalable cloud infrastructure for services used by millions globally. It fosters an inclusive, collaborative culture and works with cross-functional teams to continuously improve.

$230,000–$334,000/yr
North America

  • Set the multi-year technical strategy and architecture for Infrastructure Services, balancing reliability, security, cost, and speed.
  • Define the patterns, standards, and guardrails across compute, network, edge, and stateful services.
  • Serve as an escalation point for incidents and drive organization-wide improvements to reliability and cost efficiency.

1Password is a cybersecurity company building enterprise password management and Unified Access Management to secure identities, applications, and devices. Trusted by over 180,000 businesses, it has a remote-first culture focused on collaboration, curiosity, and high performance.

$170,350–$275,550/yr
US 16w maternity 16w paternity

  • Design and build core systems for Docker's enterprise agentic platform using Go and Kubernetes.
  • Own production reliability from on-call to SLOs and incident response.
  • Set technical direction and mentor engineers while driving security, identity, and network boundaries.

Docker builds developer tools trusted by over 20 million monthly users and billions of container pulls. It is a globally distributed, remote-first team with a culture of trust, flexibility, and engineering excellence.

EU

  • Build and maintain secure CI/CD pipelines, embedding security testing and controls into software development and deployment.
  • Strengthen application and cloud-native security across Kubernetes and containerized environments, identifying risks and implementing practical controls.
  • Manage CVE and vulnerability lifecycles, supporting prioritization and working with application teams on mitigation and remediation.

Redcare Pharmacy is Europe's leading online pharmacy, driven by dedicated teams and cutting-edge innovation. The company fosters an enjoyable and collaborative working environment where every employee feels comfortable and motivated to contribute to the vision: 'Until every human has their health.'

$157,000–$184,000/yr
US Canada Germany UK Unlimited PTO 18w maternity 12w paternity

  • Design, build, and ship secure container technologies from design through production.
  • Develop image pipelines, registry infrastructure, and developer tooling for security and performance.
  • Collaborate with product, customers, and engineers while integrating AI-assisted development.

Chainguard develops secure container technologies and open-source tools to help organizations build and deploy software safely. It is a remote-first, fast-growing company with a small autonomous engineering team that values ownership, transparency, and continuous improvement.

US

  • Own security solutioning for k0rdent AI across the full stack, from hardware to AI models.
  • Publish reference architectures and proofs of concept with customers and partners.
  • Research emerging threats and present to engineers, executives, and conference audiences.

Mirantis, an IREN company, is the Kubernetes-native AI infrastructure company enabling organizations to build scalable, secure infrastructure for AI and data-intensive applications. It is a distributed, world-class team committed to openness and technical excellence.

Brazil

  • Integrate security controls into CI/CD pipelines, including SAST, SCA, and container scanning.
  • Lead vulnerability management and governance with risk-based prioritization and remediation.
  • Design and implement security controls across GCP infrastructure using IaC practices.

The company is a technology firm specializing in cloud-native security solutions. It operates with a globally distributed team and emphasizes a flexible, autonomous working culture.