Staff Security Engineer, Infrastructure
SF Office • FullTime
Posted 3mo ago
About the job
We are seeking a Security Engineer, Infrastructure to safeguard the core systems powering fal.ai's platform, including GPU compute, multi-cloud environments, networking, and data pipelines. This role involves hands-on, systems-oriented work across the full stack, from cloud and Kubernetes to identity, networking, and secrets. You will be responsible for designing and implementing scalable security controls at the intersection of security, infrastructure, and distributed systems, ensuring the integrity and safety of our high-performance AI platform.
Responsibilities
- Design and implement security controls for cloud infrastructure, Kubernetes, networking, CI/CD pipelines, and secure GPU compute environments.
- Manage machine identity, workload authentication, secrets management, and implement Zero Trust principles.
- Protect model weights, inference endpoints, and customer data, designing secure data access pathways and isolation mechanisms.
- Build security guardrails into infrastructure and CI/CD using Infrastructure-as-Code for secure defaults.
- Continuously identify and remediate security gaps through automation.
- Perform threat modeling and mitigate risks across infrastructure layers, defending against external and insider threats.
- Drive projects such as network isolation, encryption, and secure service communication.
- Collaborate with platform, infra, and ML teams to integrate security early in the development process.
- Enable engineers to move quickly with secure-by-default systems.
- Contribute to fostering a strong security culture across the company.
Requirements
- 8+ years in security engineering, infrastructure, or SRE.
- Strong understanding of cloud security (AWS, GCP, or Azure).
- Solid grasp of networking fundamentals (segmentation, firewalls, Zero Trust).
- Experience with Linux systems and container security (Docker, Kubernetes).
- Proven experience building or securing production infrastructure at scale.
- Deep knowledge of authentication & authorization systems, secrets management, and cryptography.
- Familiarity with common vulnerabilities and attack vectors.
- Ability to design security controls across multiple layers (infrastructure to application).
- Proficiency in at least one programming language (Go, Python, or similar).
- Experience with Infrastructure-as-Code (Terraform preferred).
- Strong automation mindset.
- Experience with GPU infrastructure or ML systems is a plus.
- Experience with multi-tenant platform isolation is a plus.
- Experience with service mesh / zero-trust architectures is a plus.
- Experience in high-growth startup environments is a plus.
Benefits
- Competitive salary
- Equity
- Full health, dental, and vision coverage