Security Engineer Kubernetes
SpaceXAI builds frontier AI models and products including the Grok conversational assistant and a multimodal developer API.
Funding history
About SpaceXAI
SpaceXAI is a US-based AI company focused on accelerating scientific discovery and understanding the universe through reasoning, voice, image, video, and generative AI systems. Formerly xAI, it was acquired by SpaceX effective February 2, 2026, while continuing to operate the x.ai site and services.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will assess Kubernetes environments for exploitable risks, remediate privilege and configuration issues, and build security automation. You will strengthen identity, secrets, network, and supply-chain controls, review elevated changes, and partner with platform teams through rollout.
Requirements
- 3+ years in platform security, Kubernetes security, or offensive security against production infrastructure
- Deep knowledge of pod and workload security, including privileged containers, capabilities, namespaces, mounts, service accounts, RBAC, admission control, and network isolation
- Knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access
- Experience with operators, custom resources, Helm, and GitOps
- Ability to build or modify security tooling in Go, Python, or Rust
- Open to working from Palo Alto, Austin, Washington, DC, or New York offices
Responsibilities
- Secure nodes, clusters, pods, roles, tokens, secrets, service communication, and the supply chain
- Find and remediate overprivileged permissions, dangerous workload settings, and escalation paths
- Assess the platform for container and pod breakout, privilege escalation, and workload movement
- Design and build security tooling and automation
- Strengthen identity and secrets handling
- Improve supply-chain security through base images and continuous scanning
- Review changes affecting RBAC, operators, ServiceAccounts, network policies, and elevated privileges
- Partner with platform and product teams through rollout
- Contribute to fleet-wide hardening, policy enforcement, and safer defaults
Benefits
- Equity
- Medical coverage
- Vision coverage
- Dental coverage
- 401(k) retirement plan
- Short-term disability insurance
- Long-term disability insurance
- Life insurance
- Discounts and perks
