← All roles

Security Engineer, Kubernetes

xAI· Information Security
Apply on company site
Hybrid (Palo Alto, CA; Austin, TX; New York, NY; Washington, DC)$100k - $258kfull-timePosted 5d ago

About the role

Role focused on securing SpaceX and SpaceXSI Kubernetes environments by proactively identifying risks and building durable fixes and tooling to protect platforms behind X and SpaceXSI infrastructure, products, and workloads.

Responsibilities

  • Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service communication, and the supply chain
  • Find and remediate overprivileged permissions, dangerous pod and workload settings, and escalation paths in operators, admission, networking, identity, and monitoring
  • Assess our own platform the way an adversary would, including container and pod breakout, privilege escalation, and movement across workloads, using safe and constrained validation, then fix what you find
  • Design and build security tooling and automation, including AI-assisted analysis, that catches risky configuration and overprivilege before or after it ships
  • Strengthen identity and secrets handling so workloads receive only the access they need
  • Improve supply-chain security through secure base images, continuous scanning, and related controls
  • Review changes that affect RBAC, operators, ServiceAccounts, network policies, and anything running with elevated privileges
  • Partner with platform and product teams as a security owner, taking problems from identification through rollout
  • Contribute to fleet-wide hardening, policy enforcement, and safer defaults

Qualifications

  • 3+ years in platform security, Kubernetes security, or offensive security against production infrastructure
  • Deep knowledge of pod and workload security: privileged containers, capabilities, host namespaces, host path mounts, service accounts, RBAC, admission control, and network isolation
  • Working knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access
  • Able to think like an attacker, measure blast radius, and turn the path into a detection, control, or tool
  • Comfortable with operators, custom resources, Helm, and GitOps workflows
  • Able to build or modify security tooling in Go, Python, or Rust when a control needs automation
  • Bonus: Image scanning, SBOMs, secure base images, policy-as-code (Kyverno, OPA), multi-cluster environments, runtime detection, and security testing of customer-facing application
  • Open to working out of one of our offices: Palo Alto, Austin, DC, or New York.

Skills

Required:Kubernetes securitySecurity toolingGo/Python/Rust

Benefits

  • equity
  • comprehensive medical, vision, and dental coverage
  • access to a 401(k) retirement plan
  • short & long-term disability insurance
  • life insurance
  • various other discounts and perks
Last updated Oct 21, 2026. Interested? Apply on the company site.

About xAI

liquid-ai-recruiting-target
Company profileWebsite

More open roles at xAI