Kubernetes Security Engineer

Job Title: Kubernetes Security Engineer

Location: BGC, Taguig

Work Arrangement: Full onsite, Dayshift

Compensation: up to 200k + HMO day 1, Prorated 13th month, Government Mandated Benefits, Leave Credits

About the Role

We are seeking a Kubernetes Security & AI Automation Engineer to join our cybersecurity team in supporting a leading U.S.-based digital financial institution.

This is not a scan-and-ticket role. In this high-impact position, you will take ownership of containerized infrastructure security across cloud and on-premises Kubernetes environments. You will design pod-level network microsegmentation, enforce zero-trust posture, and pioneer custom AI agents to automate routine container security workflows at machine speed.

Requirements:

• 3+ years of dedicated experience in Kubernetes security within a production enterprise environment.
• Network & Policy Expertise: Deep hands-on experience with Kubernetes NetworkPolicies and CNI/service mesh tools (Cilium, Calico, Istio, Isovalent, or Cisco Secure Workload).
• Cloud Platforms: Hands-on experience securing AWS EKS, Azure AKS, or GCP GKE.
• Security Tooling: Experience with container security tools (Aqua, Prisma Cloud, Sysdig, Trivy, Falco).
• Scripting & IaC: Proficiency in Python (strongly preferred), Go , or Bash , alongside IaC tools (Terraform, Helm, Kustomize).
• Strong troubleshooting skills for complex distributed network and cluster security issues.

Preferred:

• Hands-on experience developing or integrating AI/LLM-driven security automation (prompt engineering, AI orchestration frameworks, API automation).
• Certified Kubernetes Security Specialist (CKS) certification.
• Prior experience in highly regulated financial services environments (PCI-DSS, CIS Benchmarks).
• Experience implementing Service Mesh security (mTLS, identity-based access).