Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days agoWe saw it 30 min after it went up

Security Engineer, Kubernetes

xAI298 open roles

Pay
$100,000 – $258,000 a year
Where
Palo Alto, CA; Austin, TX; New York, NY; Washington, DC
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Engineer, KubernetesxAI · Palo Alto, CA; Austin, TX; New York, NY; Washington, DC

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on xAI's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. xAI postings stay open a median of 52 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 2 days ago

xAI median: 52 days open

The posting

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.

SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.

ABOUT THE ROLE:

We protect the platform that runs X and SpaceXSI. We don’t just report issues, we actively look for real risks and exploits in our Kubernetes environments and turn them into durable fixes and tooling. You will secure the platform behind X and SpaceXSI’s infrastructure, products, and workloads. If you know pod and platform security, think in attack paths, and want to build the defenses that make the platform safer at scale, we want to hear from you.

We Value

  • Understanding how Kubernetes can actually be abused, not only how it is configured
  • Shipping practical controls and tooling over writing policy documents
  • Least privilege and defense-in-depth at fleet scale
  • Clear findings and fixes that platform teams can act on
  • Safe, constrained validation that does not put production at risk

RESPONSIBILITIES:

  • Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service communication, and the supply chain
  • Find and remediate overprivileged permissions, dangerous pod and workload settings, and escalation paths in operators, admission, networking, identity, and monitoring
  • Assess our own platform the way an adversary would, including container and pod breakout, privilege escalation, and movement across workloads, using safe and constrained validation, then fix what you find
  • Design and build security tooling and automation, including AI-assisted analysis, that catches risky configuration and overprivilege before or after it ships
  • Strengthen identity and secrets handling so workloads receive only the access they need
  • Improve supply-chain security through secure base images, continuous scanning, and related controls
  • Review changes that affect RBAC, operators, ServiceAccounts, network policies, and anything running with elevated privileges
  • Partner with platform and product teams as a security owner, taking problems from identification through rollout
  • Contribute to fleet-wide hardening, policy enforcement, and safer defaults

BASIC QUALIFICATIONS:

  • 3+ years in platform security, Kubernetes security, or offensive security against production infrastructure
  • Deep knowledge of pod and workload security: privileged containers, capabilities, host namespaces, host path mounts, service accounts, RBAC, admission control, and network isolation
  • Working knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access
  • Able to think like an attacker, measure blast radius, and turn the path into a detection, control, or tool
  • Comfortable with operators, custom resources, Helm, and GitOps workflows
  • Able to build or modify security tooling in Go, Python, or Rust when a control needs automation
  • Bonus: Image scanning, SBOMs, secure base images, policy-as-code (Kyverno, OPA), multi-cluster environments, runtime detection, and security testing of customer-facing application
  • Open to working out of one of our offices: Palo Alto, Austin, DC, or New York.

PREFERRED SKILLS AND EXPERIENCE:

  • Experience developing AI-driven security tools or integrating AI into security workflows
  • Familiarity with Kubernetes-based environments and securing cloud-native infrastructure
  • Proven ability to drive technical decisions and influence security practices across teams
  • A passion for challenging the status quo and building transformative security solutions
  • Strong collaboration skills, with experience working in dynamic, cross-functional teams
  • A sense of humor and adaptability to thrive in a fast-paced, mission-driven environment

COMPENSATION AND BENEFITS:

$100,000 - $258,000 USD

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against xAI's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on xAI's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    xAI's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.