Job Description

Job Title: Kubernetes Security Engineer

Location: BGC, Taguig

Work Arrangement: Full onsite, Dayshift

Compensation: up to 200k + HMO day 1, Prorated 13th month, Government Mandated Benefits, Leave Credits

About the Role

We are seeking a Kubernetes Security & AI Automation Engineer to join our cybersecurity team in supporting a leading U.S.-based digital financial institution.

This is not a scan-and-ticket role. In this high-impact position, you will take ownership of containerized infrastructure security across cloud and on-premises Kubernetes environments. You will design pod-level network microsegmentation, enforce zero-trust posture, and pioneer custom AI agents to automate routine container security workflows at machine speed.

Requirements:

3+ years of dedicated experience in Kubernetes security within a production enterprise environment.
Network & Policy Expertise: Deep hands-on experience with Kubernetes NetworkPolicies and CNI/service mesh tools (Cilium, Calico, Istio, Isovalent, or Cisco Secure Workload).
Cloud Platforms: Hands-on experience securing AWS EKS, Azure AKS, or GCP GKE.
Security Tooling: Experience with container security tools (Aqua, Prisma Cloud, Sysdig, Trivy, Falco).
Scripting & IaC: Proficiency in Python (strongly preferred), Go, or Bash, alongside IaC tools (Terraform, Helm, Kustomize).
Strong troubleshooting skills for complex distributed network and cluster security issues.

Preferred:

Hands-on experience developing or integrating AI/LLM-driven security automation (prompt engineering, AI orchestration frameworks, API automation).
Certified Kubernetes Security Specialist (CKS) certification.
Prior experience in highly regulated financial services environments (PCI-DSS, CIS Benchmarks).
Experience implementing Service Mesh security (mTLS, identity-based access).