Senior Security Engineer

Vultr builds cloud infrastructure and is hiring a Senior Security Engineer to develop Python-based security tools and automation for its cloud infrastructure. The role focuses on Kubernetes security, CI/CD integrations, self-service tools, incident response, and collaboration with engineering teams.

Responsibilities:

• Design and develop Python-driven security tools, including vulnerability scanners, API security validators, and CI/CD security gateways using Flask/FastAPI
• Build comprehensive Kubernetes security automation, including RBAC policy generators, runtime threat detection systems, and automated secrets rotation
• Create self-service security tools that empower engineering teams with infrastructure-as-code validators and container compliance checks
• Enhance GitLab CI/CD pipelines with custom security automation, integrating SAST/DAST workflows and secrets detection
• Develop Grafana-compatible tooling for real-time security metrics aggregation, log analysis, and threat visibility dashboards
• Modernize legacy PHP systems through Python-based wrappers and migration pipelines
• Collaborate cross-functionally to integrate security tooling seamlessly into development workflows
• Champion security automation best practices across cloud-native environments
• Respond to security incidents with custom tooling and automated remediation workflows
• Mentor team members on secure development practices and tool architecture

Requirements:

• 5+ years of security-focused software development experience with demonstrated tool-building expertise
• Advanced Python proficiency with production-grade development using Flask/FastAPI, async workflows, and comprehensive testing frameworks
• Hands-on Kubernetes tooling experience, including operators, admission controllers, or custom security automation development
• Practical experience with Grafana dashboard creation, metrics collection, and GitLab CI/CD pipeline customization
• Basic PHP familiarity for legacy system collaboration and modernization projects
• Strong understanding of security automation principles and DevSecOps practices
• Experience with container security, secrets management, and infrastructure-as-code security validation
• Ability to build scalable security solutions that integrate with existing development workflows
• Track record of creating self-service tools that reduce manual security overhead