Security Engineer — Cybersecurity

Seven Boson Group seeks a hands-on Security Engineer to design, implement, and maintain secure infrastructure for sovereign AI deployments. The role emphasizes zero-trust networking, identity and access management, encryption and secrets management, audit logging, and security testing across cloud and Kubernetes environments.

Key Responsibilities

• Design and implement security controls across infrastructure, applications, and deployment environments.
• Build and maintain zero-trust networking, service authentication, and secure communication between systems.
• Implement role-based and attribute-based access controls (RBAC and ABAC) for users, services, and AI agents.
• Support public key infrastructure (PKI), including certificate management, encryption, and digital signing.
• Configure and maintain Kubernetes security controls such as network policies, namespace isolation, and secrets management.
• Implement audit logging, monitoring, and security observability to support detection and investigation needs.
• Support secure deployment environments, including network isolation and data residency requirements.
• Manage secrets and credentials using tools such as Vault or OpenBao.
• Integrate security testing, vulnerability scanning, and credential detection into CI/CD pipelines.
• Collaborate with engineering teams to identify vulnerabilities, improve security practices, and support compliance readiness.

Required Qualifications

• 3+ years of professional experience in security engineering, infrastructure security, DevSecOps, or a closely related role.
• Hands-on experience implementing security controls in production environments.
• Working knowledge of network security, identity and access management, encryption, and secure authentication.
• Experience with cloud infrastructure, Linux, containers, or Kubernetes.
• Familiarity with TLS, PKI, secrets management, and access control principles.
• Experience with security monitoring, vulnerability management, or CI/CD security tools.
• Ability to troubleshoot security issues and work collaboratively with engineering teams.

Technologies

• Kubernetes
• Vault, OpenBao
• TLS, PKI
• RBAC, ABAC
• CI/CD
• Linux, containers
• OpenTelemetry
• Ed25519, ECDSA P-256
• HIPAA, FedRAMP, ITAR
• SPIFFE, SPIRE
• mTLS

Preferred Qualifications

• Experience with zero-trust security architecture or isolated or air-gapped environments.
• Experience with Kubernetes security, including RBAC, network policies, and workload identity.
• Familiarity with SPIFFE/SPIRE, mutual TLS (mTLS), or service-to-service authentication.
• Experience with Vault, OpenBao, or similar secrets management platforms.
• Knowledge of cryptographic signing technologies such as Ed25519 or ECDSA P-256.
• Familiarity with OpenTelemetry, immutable audit logging, or security observability.
• Exposure to HIPAA, FedRAMP, ITAR, government security requirements, or regulated environments.
• Experience supporting AI systems, distributed infrastructure, or international deployments.

Compensation

USD 100,000 - 180,000 per year.

Work Location

Hybrid remote in San Francisco, CA (94114).

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Parental leave
• Vision insurance