{"id":2976478,"url":"https://alion.io/job/xai-security-engineer-kubernetes","title":"Security Engineer, Kubernetes","company":{"id":28,"name":"xAI","domain":"x.ai","url":"https://alion.io/company/xai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":95,"ghost_share":0,"stale_share":0.547,"repost_share":0,"time_to_fill_p50_days":59,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States","Austin, United States","New York, United States","Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":258000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":258000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Defense in Depth","optional":false},{"name":"GitOps","optional":false},{"name":"Helm","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"Least Privilege","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false}],"status":"live","first_seen_at":"2026-10-21T02:03:11Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-27T13:20:05Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.\nSpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.\nABOUT THE ROLE:\nWe protect the platform that runs X and SpaceXSI. We don’t just report issues, we actively look for real risks and exploits in our Kubernetes environments and turn them into durable fixes and tooling. You will secure the platform behind X and SpaceXSI’s infrastructure, products, and workloads. If you know pod and platform security, think in attack paths, and want to build the defenses that make the platform safer at scale, we want to hear from you.\nWe Value\nUnderstanding how Kubernetes can actually be abused, not only how it is configured\nShipping practical controls and tooling over writing policy documents\nLeast privilege and defense-in-depth at fleet scale\nClear findings and fixes that platform teams can act on\nSafe, constrained validation that does not put production at risk\nRESPONSIBILITIES:\nSecure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service communication, and the supply chain\nFind and remediate overprivileged permissions, dangerous pod and workload settings, and escalation paths in operators, admission, networking, identity, and monitoring\nAssess our own platform the way an adversary would, including container and pod breakout, privilege escalation, and movement across workloads, using safe and constrained validation, then fix what you find\nDesign and build security tooling and automation, including AI-assisted analysis, that catches risky configuration and overprivilege before or after it ships\nStrengthen identity and secrets handling so workloads receive only the access they need\nImprove supply-chain security through secure base images, continuous scanning, and related controls\nReview changes that affect RBAC, operators, ServiceAccounts, network policies, and anything running with elevated privileges\nPartner with platform and product teams as a security owner, taking problems from identification through rollout\nContribute to fleet-wide hardening, policy enforcement, and safer defaults\nBASIC QUALIFICATIONS:\n3+ years in platform security, Kubernetes security, or offensive security against production infrastructure\nDeep knowledge of pod and workload security: privileged containers, capabilities, host namespaces, host path mounts, service accounts, RBAC, admission control, and network isolation\nWorking knowledge of identity, secrets, workload identity, service-to-service trust, supply chain, runtime, and cloud access\nAble to think like an attacker, measure blast radius, and turn the path into a detection, control, or tool\nComfortable with operators, custom resources, Helm, and GitOps workflows\nAble to build or modify security tooling in Go, Python, or Rust when a control needs automation\nBonus: Image scanning, SBOMs, secure base images, policy-as-code (Kyverno, OPA), multi-cluster environments, runtime detection, and security testing of customer-facing application\nOpen to working out of one of our offices: Palo Alto, Austin, DC, or New York. \nPREFERRED SKILLS AND EXPERIENCE:\nExperience developing AI-driven security tools or integrating AI into security workflows\nFamiliarity with Kubernetes-based environments and securing cloud-native infrastructure\nProven ability to drive technical decisions and influence security practices across teams\nA passion for challenging the status quo and building transformative security solutions\nStrong collaboration skills, with experience working in dynamic, cross-functional teams\nA sense of humor and adaptability to thrive in a fast-paced, mission-driven environment\nCOMPENSATION AND BENEFITS:\n$100,000 - $258,000 USD\nBase salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.\nSpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.","description_format":"text","description_chars":4772,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["LLM & Generative AI","Foundation Models","AI Research Labs"],"lifecycle":[{"event":"open","at":"2026-10-21T04:57:38Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":6,"expected_fill_days":59,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":258000,"is_top_pay":true},"html_url":"https://alion.io/job/xai-security-engineer-kubernetes","json_url":"https://alion.io/job/xai-security-engineer-kubernetes.json","meta":{"generated_at":"2026-10-27T17:05:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6570,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":28},"rest":"https://alion.io/mcp/rest/get_company?id=28"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fxai-security-engineer-kubernetes"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fxai-security-engineer-kubernetes"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fxai-security-engineer-kubernetes"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/xai-security-engineer-kubernetes\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fxai-security-engineer-kubernetes"}]}