Security Engineer — Cybersecurity

Seven Boson Group is seeking a hands-on Security Engineer to help secure sovereign AI deployments. This role centers on designing and operating security controls across cloud and Kubernetes, with an emphasis on zero-trust networking, identity and access management, and cryptographic protection for infrastructure and workloads.

This is a hybrid position based in San Francisco, CA, supporting secure deployment environments that may include network isolation and data residency needs. The ideal candidate will bring production experience across security engineering and DevSecOps practices, including security testing integrated into CI/CD.

Role overview

• Design and implement security controls for infrastructure, applications, and deployment environments.
• Build and maintain zero-trust networking, including service authentication and secure communication between systems.
• Implement RBAC/ABAC access controls for users, services, and AI agents.
• Support PKI, certificate management, encryption, and digital signing.
• Configure and maintain Kubernetes security controls, including network policies, namespace isolation, and secrets management.
• Implement audit logging, monitoring, and security observability.
• Support secure deployment environments, including network isolation and data residency requirements.
• Manage secrets and credentials using tools such as Vault or OpenBao.
• Integrate security testing, vulnerability scanning, and credential detection into CI/CD pipelines.
• Collaborate with engineering teams to identify vulnerabilities, strengthen security practices, and support compliance readiness.

What you bring

• 3+ years of professional experience in security engineering, infrastructure security, DevSecOps, or a closely related role.
• Hands-on experience implementing security controls in production environments.
• Working knowledge of network security, identity and access management, encryption, and secure authentication.
• Experience with cloud infrastructure, Linux, containers, or Kubernetes.
• Familiarity with TLS, PKI, secrets management, and access control principles.
• Experience with security monitoring, vulnerability management, or CI/CD security tools.
• Ability to troubleshoot security issues and work collaboratively with engineering teams.

Technologies you may work with

• Kubernetes, Vault, OpenBao, TLS, PKI, RBAC, ABAC
• CI/CD, Linux, containers, OpenTelemetry
• Ed25519, ECDSA P-256
• HIPAA, FedRAMP, ITAR
• SPIFFE, SPIRE, mTLS

Location

• Hybrid remote in San Francisco, CA (94114)

Compensation

• $100,000 - $180,000 per year

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Parental leave
• Vision insurance

Preferred qualifications

• Experience with zero-trust security architecture or isolated/air-gapped environments.
• Experience with Kubernetes security, including RBAC, network policies, and workload identity.
• Familiarity with SPIFFE/SPIRE, mTLS, or service-to-service authentication.
• Experience with Vault, OpenBao, or similar secrets management platforms.
• Knowledge of cryptographic signing technologies such as Ed25519 or ECDSA P-256.
• Familiarity with OpenTelemetry, immutable audit logging, or security observability.
• Exposure to HIPAA, FedRAMP, ITAR, government security requirements, or regulated environments.
• Experience supporting AI systems, distributed infrastructure, or international deployments.