[Hiring] Senior Security Engineer - Kubernetes Security & AI Automation @Axos Bank

Role Description

Axos is building an AI-native security organization that moves at the speed of the business. Our Kubernetes footprint is expanding to support rapid innovation, continuous deployment, and faster time to market across every line of business. We are looking for a Kubernetes Security & AI Automation Engineer who will own the security posture of our container and orchestration infrastructure while pioneering AI-driven automation to detect, investigate, and remediate threats at machine speed.

This is not a compliance checkbox role. You will build things: policy-as-code pipelines, AI-powered detection logic, and automated response workflows that keep Kubernetes clusters hardened without slowing engineering velocity.

Responsibilities

• Kubernetes & Container Security
  • Design, implement, and maintain security controls across Kubernetes clusters (EKS, AKS, or GKE), including network policies, RBAC, admission controllers, pod security standards, and secrets management.
  • Build and enforce policy-as-code guardrails that prevent misconfigurations from reaching production without creating developer friction.
  • Manage runtime security tooling (Falco, Isovalent, or equivalent) to detect anomalous container behavior, lateral movement, and privilege escalation in real time.
• AI-Driven Security Automation
  • Build AI/LLM-powered automation pipelines that triage, investigate, and enrich Kubernetes security alerts, reducing mean time to respond and analyst toil.
  • Develop prompt-engineered investigation workflows that correlate container telemetry (audit logs, Isovalent alerts, network flows) with broader SIEM data to produce analyst-ready investigation reports.
  • Create automated remediation playbooks that can quarantine pods, revoke credentials, or roll back deployments in response to confirmed threats, with appropriate human-in-the-loop controls.
  • Continuously tune detection logic and AI investigation prompts based on false-positive analysis, emerging threat patterns, and feedback from SOC analysts.
  • Evaluate and integrate AI/ML-based anomaly detection for container workloads, API traffic, and cluster resource behavior.
• Security Engineering & Operations
  • Instrument Kubernetes environments for comprehensive security observability: audit logs, runtime telemetry, and network flow data piped into Splunk or equivalent SIEM.
  • Partner with platform engineering and application teams to embed security into deployment pipelines without becoming a bottleneck.
  • Serve as the subject-matter expert on Kubernetes threat modeling, advising teams on attack surfaces unique to containerized and orchestrated environments.
  • Maintain runbooks, architecture diagrams, and operational documentation that enable the broader security team to support container security operations.
  • Track the Kubernetes security landscape (CVEs, CIS benchmarks, CNCF projects) and translate emerging risks into actionable hardening initiatives.

Qualifications

• 5+ years in security engineering, DevSecOps, or infrastructure security with meaningful hands-on Kubernetes experience in production.
• Deep, practical knowledge of Kubernetes internals: API server, etcd, kubelet, networking (CNI), storage, and the admission control chain.
• Demonstrated experience building security automation with Python (strongly preferred), Bash, or Go.
• Hands-on experience with at least two of: OPA/Gatekeeper, Kyverno, Falco, Trivy, Cosign, KubeArmor, or Aqua.
• Strong working knowledge of cloud platforms (AWS EKS, Azure AKS, or GCP GKE) and associated IAM, networking, and security services.
• Experience integrating container security telemetry into SIEM platforms (Splunk preferred) for alerting and investigation.
• Solid understanding of CI/CD pipelines (GitHub Actions, GitLab CI, or similar) and how to embed security gates without breaking developer flow.

Requirements

• Experience building or integrating LLM/AI-driven workflows for security operations (alert triage, investigation enrichment, automated remediation).
• Familiarity with prompt engineering, LLM orchestration frameworks (LangChain, Kindo, or similar), and vector databases for security use cases.
• CKS (Certified Kubernetes Security Specialist) or CKA certification.

Benefits

• You will build, not just govern. This team ships security tooling and automation, not slide decks.
• AI-first security organization: our autonomous SOC pipeline is live and you will extend it into the Kubernetes domain.
• Direct impact at a federally chartered digital bank where security decisions are consequential and visible to leadership.
• Work alongside senior practitioners who value intellectual honesty, hands-on craft, and enforceable security over compliance theater.