Homeoffice Senior Security Researcher - Security Team with verification

Why CAST AI?

CAST AI is the leading Kubernetes automation platform for AWS, GCP and Azure customers. The company is on a mission to deliver a fully automated Kubernetes experience. What’s unique about CAST AI is that its platform goes beyond monitoring clusters and making recommendations; it utilizes advanced machine learning algorithms to analyze and automatically optimize clusters, saving customers 50% or more on their cloud spend, improving performance and reliability, and boosting DevOps and engineering productivity.

The company has raised $73M from investors, including Cota Capital, Creandum, Uncorrelated Ventures, and Vintage Investment Partners. CAST AI has nearly 200 employees globally and is headquartered in Miami, Florida.

However, this is merely the beginning. Our product roadmap is filled with exciting innovations that are yet to come. We are searching for intelligent, motivated, and self-reliant people to help us fulfill this ambitious mission.

Core Values That Hold Us All Together

PRACTICE CUSTOMER OBSESSION. Focus on the customer journey and work backwards. Strive to deliver customer value and continuously solve customer problems. Listen to customer feedback, act, and iterate to improve customer experience.

LEAD. Take ownership and lead through action. Think and act on behalf of the entire company to build long-term value across team boundaries.

DEVELOP AND HIRE THE BEST. Strive to raise the performance bar by continuously investing in yourself, the team and by hiring the best possible candidates for every position. Drive towards personal development and professional growth, and mentor others to raise the collective bar.

EXPECT AND ADVOCATE CHANGE. Strive to innovate and accept the inevitable change that comes with innovation. Constantly welcome new ideas and opinions. Share insights responsibly with unwavering openness, honesty, and respect. Once a path is chosen, be ready to disagree and commit to a direction.

What does the Security Team do?

As Kubernetes becomes a core component of modern infrastructure, it also expands the potential attack surface. Kubernetes is a complex component with many moving parts, making it hard to understand and hard to secure - a single cluster can have thousands of unpatched vulnerabilities and misconfigurations, but a serious breach can be triggered by a single one.

Our goal is to help our customers secure their Kubernetes clusters by surfacing the threats with the biggest potential impact and then guide them in mitigating these threats. We achieve this by building a Kubernetes security product that provides customers with visibility into the security posture of their clusters, provides insights into which threats are the most critical and guides them in remediation.

The Security Team is responsible for this Kubernetes security product end-to-end - designing and implementing new detections for misconfigurations, vulnerabilities, malicious activities, collecting and processing vast amounts of data from Kubernetes clusters to enable these detections, designing and implementing ways to leverage all this data to prioritize the findings and surface the most valuable insights for the customer.

Role overview

We are looking for a Senior Security Researcher to join our Security Team.

In this role, you will work on analyzing threats, developing rules to detect these threats, developing detections for misconfigurations or vulnerabilities that enable these threats to happen. You will work closely with both the product team and software engineers to incorporate these detections into the product.

Responsibilities

• Stay up to date with the latest threats in the Kubernetes and cloud security landscape.
• Analyze the latest threats and threat campaigns against our customers.
• Design and develop rules to detect these threats. Design and develop ways to detect misconfigurations or vulnerabilities that enable these threats to happen and guidance to remediate them.
• Maintain our current set of threat detection rules. Work on improving detection rate and minimizing false positives.
• Work on processes to continuously test the effectiveness of our rules.
• Work closely with the product team and software engineers to incorporate the detections into the security product.