application security engineer in AI infrastructure

vCluster Labs provides an AI infrastructure platform for AI cloud providers and AI factories, enabling them to operate GPU infrastructure with managed Kubernetes, Slurm, Ray, and inference clusters. It develops vCluster, an open-source Kubernetes tenant isolation technology, and an infrastructure tenancy platform for AI, ML, and GPU-intensive workloads.

• Perform security reviews of Go-based applications, Kubernetes controllers, and the frontend interface, focusing on privilege escalation in the multi-tenant architecture;
• Lead threat modeling for new features, including risks related to shared GPU resources and multi-cloud environments;
• Integrate and optimize security checks in CI and developer workflows;
• Manage automated and manual scanning of the entire product stack;
• Own the vulnerability lifecycle from discovery through remediation;
• Triage external and internal vulnerability reports;
• Drive resolution of critical security issues across the engineering organization;
• Communicate security issues effectively across stakeholders;
• Contribute ideas and development for new security-related features, including container breakouts and isolation;
• Train developers on attack vectors and secure coding concepts.

• 5+ Years of experience in Application Security or Product Security, with a strong focus on containerized environments;
• Deep understanding of Kubernetes architecture, RBAC, container runtime security, and multi-tenancy risks;
• Ability to read and write Go and identify vulnerabilities in pull requests;
• Comfort working in fast-paced, cutting-edge environments;
• Interest in solving novel problems related to AI and multi-tenant infrastructure;
• Openness to feedback and willingness to understand customers’ needs and concerns;
• Nice to have: CKS or OSCP certification, experience securing AI workloads or GPU cloud infrastructure, experience writing custom security tooling or automation scripts in Python or Go, willingness to contribute to public-facing security documentation and the Trust Center.

• Competitive compensation package including equity;
• Health, dental, vision, and life insurance for employees and eligible dependents; benefits vary by country;
• Flexible working schedule;
• Workplace flexibility.