Member of Technical Staff, Infrastructure San Francisco, CA

Parameter; San Francisco (CA); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Parameter builds AI agents that perform autonomous penetration testing on live production environments, focusing on IDORs, broken access control, XSS and misconfigurations.

You will own the platform infrastructure: orchestration, multi-tenant isolation, and cost-aware deployment. The role sits in a small team with broad product exposure and fast-moving projects in SF.

Qualifications

• 4+ years in infrastructure, platform, or SRE on production systems paged for.
• Deep GCP or AWS: networking, IAM, container orchestration, and the failure modes of each
• Strong TypeScript, and fluent in Terraform or an equivalent
• You've run workloads you don't fully trust and know how to contain them. Multi-tenant isolation is the job, not a footnote
• Bonus: security engineering background, or you've been on the receiving end of a cloud incident and fixed the class of problem afterward

Responsibilities

• Own the infrastructure the agents run on: orchestration, scheduling, isolation between customer environments, and the blast radius when a run goes wrong
• Run our GCP footprint, including networking, IAM, secrets management, and the egress paths agents test through
• Keep long-running Temporal workflows durable across restarts, provider rate limits, and model outages
• Build the deployment and observability story: CI/CD, tracing across multi-hour agent runs, and cost attribution per engagement
• Harden the platform we sell security from. Our own infrastructure goes through every customer's security review

Skills

Infrastructure/Platform

SRE/Production systems

Multi-tenant isolation

Cloud platforms

Tools

TypeScript

Terraform

Temporal

Docker

GitHub Actions

Linear

Graphite

Job description

Parameter builds AI agents that do offensive security work. Our agents run autonomous penetration tests against production applications and cloud environments, finding IDORs, broken access control, XSS, and infrastructure misconfigurations that scanners miss and that human pentest firms only look for once or twice a year.

We are not a theoretical security company. Our team has responsibly disclosed real, high-severity vulnerabilities to well-known technology companies, and our findings are the front door to most of our customer relationships.

Our agents run for hours, in parallel, against live customer infrastructure, and they are expensive when they run badly. You own the platform underneath them: the orchestration, the isolation between one customer's engagement and the next, and the difference between a run that fails loudly and one that quietly bills us for a weekend.

The title points at where you'll spend most of your time. Expect the rest of the week to go wherever the work is: agent systems one day, the product the next, a customer call or a report that has to go out after that. We are small enough that everyone works across every product, and we hire people who want that.

What you'll do

• Own the infrastructure the agents run on: orchestration, scheduling, isolation between customer environments, and the blast radius when a run goes wrong
• Run our GCP footprint, including networking, IAM, secrets management, and the egress paths agents test through
• Keep long-running Temporal workflows durable across restarts, provider rate limits, and model outages
• Build the deployment and observability story: CI/CD, tracing across multi-hour agent runs, and cost attribution per engagement
• Harden the platform we sell security from. Our own infrastructure goes through every customer's security review

What we're looking for

• 4+ years in infrastructure, platform, or SRE work on production systems someone got paged for
• Deep GCP or AWS: networking, IAM, container orchestration, and the failure modes of each
• Strong TypeScript, and fluent in Terraform or an equivalent
• You've run workloads you don't fully trust and know how to contain them. Multi-tenant isolation is the job, not a footnote
• Bonus: security engineering background, or you've been on the receiving end of a cloud incident and fixed the class of problem afterward

Interview process

• Intro call with a founder (30 minutes)
• Technical deep dive on your past work (60 minutes)
• Paid work trial or take-home, scoped to roughly one day
• Onsite in San Francisco with the team
• References and offer

Stack

TypeScript, GCP, Terraform, Temporal, Docker, GitHub Actions, Linear, Graphite

We move quickly. Our target is an offer within two weeks of first contact. Small team, high trust, extremely fast. If you want to see your work in front of customers within days, this is that.

This role is onsite in San Francisco. You must be authorized to work in the US; we are not able to sponsor visas at this time.