Sr. Security Engineer, Infrastructure & Platform Security

What To ExpectTesla is continuously pushing the boundaries of innovation in transportation, energy generation, energy storage, self-driving, AI hardware and software. Infrastructure & Platform Security under the Information Security organization is responsible for building and operating security capabilities to measure and continuously improve the security posture of our global on-premises datacenter infrastructure, public cloud footprint and several platforms which power Tesla critical business applications. Our on-premises IT infrastructure includes AI platforms that powers our AI endeavors.As a Senior Security Engineer, Infrastructure & Platform Security, you will own the security posture of Tesla's Kubernetes infrastructure while also serving as a Security SRE — ensuring the reliability, observability, and operational health of security tooling and infrastructure. You will work at the intersection of Kubernetes security, platform security, and site reliability engineering, partnering with Platform Engineering and Security Operations teams to harden Tesla's container orchestration layer and keep security systems running at production quality.What You'll DoDefine, implement, and enforce security policies and controls across Kubernetes clusters spanning on-premises, AI/HPC Infra, and public cloud environmentsOwn Kubernetes security posture management — RBAC governance, network policy enforcement, admission control, pod security standards, and secrets managementIdentify, assess, and drive remediation of vulnerabilities in Kubernetes workloads, container images, and cluster configurations at scalePerform threat modeling and risk assessments for Kubernetes environments, identifying attack paths and implementing preventive and detective controlsBuild and maintain SRE practices for security infrastructure — monitoring, alerting, incident response, capacity planning, and reliability engineering for security toolingDevelop automation and tooling for security operations — automated remediation workflows, security pipeline integrations, and self-healing infrastructureCollaborate with Security Operations, Detection, and Incident Response teams to develop K8s-specific detection signals, incident response playbooks, and forensic toolingOperate and maintain security tools deployed across Kubernetes infrastructure, ensuring high availability and minimal performance impact on production workloadsDevelop and maintain runbooks, architecture documentation, and operational playbooks for security tools and Kubernetes security controlsPartner with Kubernetes Infrastructure SRE teams to embed security into cluster lifecycle management, upgrades, and capacity operationsWhat You'll BringDegree in Computer Science, Information Systems, or the equivalent in experience and evidence of exceptional abilitySenior level working experience in a security team supporting one or more of the following areas: Kubernetes infrastructure, cloud infrastructure, on-premises datacenter infrastructure, or site reliability engineeringAdvanced hands-on experience in Kubernetes administration, cluster operations, and security hardening (RBAC, network policies, admission controllers, OPA/Gatekeeper, Kyverno)Hands-on experience with container runtime security, image scanning, and supply chain security for containerized workloadsStrong SRE skills — experience building monitoring/alerting (Prometheus, Grafana, Datadog, or equivalent), incident management, SLO/SLI frameworks, and on-call operations for infrastructureProficient in CI/CD pipelines (e.g., Jenkins, GitLab, Argo CD) with deep understanding of GitOps principles and secure software deliveryGood understanding of image vulnerability scanning tools (Aqua, Wiz, Prisma, Trivy) and artifact management (Artifactory, Docker Hub)Proficient in Linux system security and at least one programming language: Python, Go, or JavaExperience with infrastructure as code (Terraform, Helm, Kustomize) and configuration management at scaleFamiliarity with infrastructure security, defense-in-depth concepts and penetration testing methodologies for Kubernetes and container breakout techniquesBenefitsCompensation and BenefitsAlong with competitive pay, as a full-time Tesla employee, you are eligible for the following benefits at day 1 of hire: Medical plans > plan options with $0 payroll deduction Family-building, fertility, adoption and surrogacy benefits Dental (including orthodontic coverage) and vision plans, both have options with a $0 paycheck contribution Company Paid (Health Savings Accounts) HSA Contribution when enrolled in the High-Deductible medical plan with HSA Healthcare and Dependent Care Flexible Spending Accounts (FSA) 401(k) with employer match, Employee Stock Purchase Plans, and other financial benefits Company paid Basic Life, AD&D Short-term and long-term disability insurance (90 day waiting period) Employee Assistance Program Sick and Vacation time (Flex time for salary positions, Accrued hours for Hourly positions), and Paid Holidays Back-up childcare and parenting support resources Voluntary benefits to include: critical illness, hospital indemnity, accident insurance, theft & legal services, and pet insurance Weight Loss and Tobacco Cessation Programs Tesla Babies program Commuter benefits Employee discounts and perks program, Tesla