Kubernetes Runtime Security Engineer

Kubernetes Runtime Security EngineerRemote — European Union. Company based in Helsinki, FinlandCybersecurity SaaS | Kubernetes Security | Runtime Security | eBPF | Container Security Our client, a growing Cybersecurity SaaS company based in Helsinki, is looking for a Kubernetes Runtime Security Engineer to build systems that detect and prevent malicious behaviour inside production container environments. You'll work deep in the Kubernetes runtime layer, combining eBPF telemetry, behavioural detection, container security, and policy enforcement to identify threats as they happen. What You'll Work On• Build runtime security capabilities for production Kubernetes environments• Develop behavioural detections using Falco and runtime telemetry• Use eBPF to gain visibility into processes, network activity, system calls, and workload behaviour• Detect suspicious activity, container escapes, privilege abuse, and anomalous workload behaviour• Build security tooling and automation in Go• Develop and enforce Kubernetes policies using OPA / Kyverno• Investigate container and Linux runtime security events• Improve detection quality while reducing false positives• Build automated responses to high-confidence runtime threats• Integrate runtime security signals with broader detection and observability platforms• Collaborate with Platform and Security Engineers to strengthen Kubernetes environments from deployment through runtime Core Skills• 4+ years in Kubernetes Security, Container Security, Cloud Security, Platform Security, or similar roles• Deep Kubernetes knowledge• Falco or comparable runtime security technology• eBPF• Linux security• Container security• OPA and/or Kyverno• Go• Strong understanding of cloud-native threat models Nice to HaveCilium / TetragonLinux kernel internalsKubernetes admission controlContainer escape and privilege-escalation techniquesseccomp / AppArmorKubernetes audit logsDetection engineeringPrometheus / OpenTelemetryAWS / GCP / Azure Kubernetes environmentsMITRE ATT&CK for ContainersIncident response in Kubernetes environments