Senior Product Security Engineer

📋 Description Design, build, and maintain secure CI/CD pipelines with security gates. Automatically capture risk exposure of Solstice Analytics's products. Implement software supply chain security controls: signed artifacts, SBOMs, provenance attestation (SLSA, Sigstore/Cosign). Lead security architecture reviews and threat models for Kubernetes workloads on GCP and AWS. Harden container images, Kubernetes configs, and cloud IAM postures to minimize attack surface. Define and drive baseline security standards: pod security standards, network policies, workload identity, secrets management. 🎯 Requirements 5+ years in software or security engineering with hands-on security work. Go or Python: write, review, and debug production-grade code. Kubernetes in production: RBAC, network policies, and admission controls. GCP/AWS: IAM, workload identity, secrets management; familiarity with Sigstore/SLSA. CI/CD security: design/secure pipelines (GitHub Actions, Cloud Build, Tekton). Container security: image scanning, distroless bases, runtime protections. 🎁 Benefits Flexible remote-first culture with team meetups and coworking stipend. Stock options on hire/promotion with a 10-year exercise window. 100% covered health, vision, and dental insurance for you and dependents. Infinite Flexible Time Off. 18 weeks paid parental leave (birthing) and 12 weeks for non-birthing.