About the Company
Our hiring partner is building the infrastructure layer for the AI-first world. Their mission is to make AI compute ubiquitous, seamless, and limitless by operating a cloud where AI workloads run securely at massive scale—anywhere, anytime.

They run a multi-tenant GPU cloud for AI developers and enterprises. Security isn’t just a support function—it’s a core platform capability.

Why this role exists
The company is scaling a shared, high-performance AI compute platform in a space where traditional cloud security models break down. Multi-tenant GPUs, high-speed networking, and untrusted customer workloads introduce security challenges that don’t have off-the-shelf solutions.

They are hiring a Staff Security Engineer to define and own the security architecture of the platform. You’ll operate with wide latitude, shaping how isolation, detection, and trust are built into the system from day one.

This role is ideal for someone who thrives in early-to-mid stage environments, enjoys working through ambiguity, and wants to build security systems that scale with the business—not slow it down.

What you’ll do

• Own the end-to-end security architecture for multi-tenant Kubernetes GPU clusters
• Design tenant isolation, egress control, and network segmentation across compute, storage, and networking layers
• Define and implement runtime security and intrusion detection for untrusted AI workloads
• Build security primitives (identity, secrets, encryption, policy enforcement) for platform teams to leverage
• Secure the software supply chain, from CI/CD pipelines to container admission
• Lead threat modeling and security design reviews for new platform features
• Drive compliance readiness (SOC 2, ISO 27001) without slowing engineering velocity
• Act as a force multiplier: unblock teams, set standards, and raise the security bar across the organization
• Lead security incident response and turn incidents into systemic improvements

What we’re looking for

• 7+ years of experience in security engineering for cloud-native, infrastructure, or distributed systems
• Deep, hands-on expertise in Kubernetes security (RBAC, PSA, network policies, admission controllers)
• Strong understanding of cloud security primitives in AWS, GCP, or Azure
• Experience building or operating runtime security and policy enforcement (Falco, Cilium, OPA, Calico, eBPF-based tools)
• Solid grounding in network security and zero-trust architectures
• Practical experience with secrets management and key systems (Vault, cloud KMS)
• Strong automation skills in Go, Python, or Bash
• Proven ability to operate autonomously, make architectural decisions, and deliver in ambiguous environments
• Experience partnering closely with platform, infrastructure, and SRE teams

Bonus experience (nice to have, not required)

• GPU isolation and virtualization security (MIG, SR-IOV)
• InfiniBand, RDMA, or high-performance networking
• HPC or large-scale multi-tenant compute platforms
• Security for AI/ML systems or data-intensive workloads
• Incident response leadership or red team experience
• Security certifications (CKS, OSCP, CISSP)
• Open-source contributions in security or cloud infrastructure

What makes this role different

• You’ll define the security model, not just implement tickets
• You’ll work on real isolation challenges in GPU and high-speed networking environments
• You’ll influence architecture across the platform, not sit in a silo
• You’ll help build a security culture at a company where speed and safety both matter

Compensation

• Competitive salary — commensurate with your experience and aligned with industry standards
• Meaningful equity — be part of the upside as the company builds a category-defining platform. Your grant will align with your role and experience.