Member of Technical Staff (Security) - AI Infrastructure

Hamilton Barnes Associates Limited; United States; On-site; USD 213,000 - 288,000; Full time

Benefits offered by this job

Equity

Full Healthcare

Job summary

Hamilton Barnes Associates Limited is a growth-focused infrastructure company scaling specialized hardware for AI workloads in data centers. The role covers security-in-design, CI/CD ownership, identity and data protection, and SOC 2 Type 2 control implementation.

You will lead security reviews, implement robust access controls, and drive vulnerability management, incident response, and auditing processes across production systems.

Qualifications

• Proven expertise shipping and operating production software in Go, Python, or Rust.
• Hands-on security of cloud infra, APIs, containers, and distributed systems.
• Experience owning production CI/CD and infrastructure as code.
• Proficient in securing CI/CD pipelines, build infra, and dependencies.
• Deep knowledge of identity, secrets, encryption, and tenant isolation.
• Experience with SOC 2 Type 2 or equivalent assurance program.
• Understanding of privacy, data protection, retention, and deletion.
• Ability to communicate complex tech clearly to engineers, customers, auditors.

Responsibilities

• Build security into our infrastructure and products across APIs, cloud environments, containers, host systems, and workload isolation.
• Own CI/CD and DevOps engineering; manage pipelines, runners, repositories, and infrastructure automation; handle provisioning, release workflows, deployment verification, and rollback.
• Own identity, access, and secrets management; implement least privilege and rotation; build access controls for people and agents.
• Protect customer data across its lifecycle; translate privacy requirements into enforceable system behavior with partners.
• Build and operate SOC 2 Type 2 controls; automate evidence collection and audits; drive remediation.
• Lead security reviews with customers; explain architecture and controls; deliver changes to support adoption.
• Build detection and response capabilities; manage vulnerabilities; coordinate testing and remediation.
• Utilize agentic engineering to inspect security posture and automate bounded actions with auditability.

Skills

Go

Python

Rust

Production software

Cloud security

CI/CD

Infra as code

Identity & access

Threat modeling

Security automation

Tools

Cloud platforms

Job description

Keen to join a company that champions growth and development?

Join a high-growth infrastructure company that scales specialized hardware within data center environments for advanced artificial intelligence workloads. The organization builds robust cloud platforms that expose high-performance hardware as elastic compute via developer-friendly interfaces. Its technology enables software teams to develop agentic capabilities and deploy complex, long-running AI models.

Responsibilities:

• Build security into our infrastructure and products. Review designs, threat model systems, and implement protections across APIs, cloud environments, containers, host systems, and customer workload isolation.
• Own CI/CD and DevOps engineering. Build and operate our build, test, and deployment pipelines, runners, artifact repositories, and infrastructure automation. Own environment provisioning, release workflows, deployment verification, and rollback. Improve delivery speed, reliability, and developer experience. Integrate security scanning, secrets management, artifact provenance, and access controls throughout these systems.
• Own identity, access, and secrets management. Implement least privilege, service identity, privileged access, credential rotation, and access reviews across production and internal systems. Build access controls for both people and software agents.
• Protect customer data throughout its lifecycle. Build controls for data collection, access, encryption, retention, deletion, and logging. Work with engineering and legal partners to translate privacy requirements and customer commitments into enforceable system behavior.
• Build and operate our SOC 2 Type 2 controls. Translate requirements into engineering work, automate evidence collection and control checks, coordinate technical walkthroughs with auditors, and drive findings through remediation. Keep evidence connected to how production systems actually operate.
• Own the engineering response to enterprise security requirements. Lead technical security reviews with customers, explain our architecture and controls, evaluate requirements, and deliver the changes needed to support customer adoption. Keep security documentation and customer commitments accurate.
• Build detection and response capabilities. Establish useful security telemetry, investigate threats, lead security incidents, and turn findings into lasting improvements. Own vulnerability management and coordinate penetration testing and remediation.
• Use agentic engineering throughout the work. Use coding agents to investigate, implement, and validate changes. Build tools that let agents inspect security posture, gather evidence, and perform bounded actions with appropriate authorization and auditability.

Skills/Must have:

• Strong software engineering skills in Go, Python, Rust, or a similar language, with experience shipping and operating production software.
• Hands-on experience securing cloud infrastructure, APIs, containers, and distributed systems.
• Experience owning production CI/CD systems and infrastructure as code, including diagnosing failed builds and deployments, managing environments, and improving release reliability.
• Experience securing CI/CD pipelines, build infrastructure, deployment workflows, and software dependencies.
• Depth in identity and authorization, secrets management, encryption, network security, and tenant isolation.
• Experience implementing and operating controls for SOC 2 Type 2 or a comparable security assurance program.
• Practical knowledge of privacy and data protection, including access controls, data minimization, retention, and deletion.
• Experience investigating security incidents, prioritizing vulnerabilities, and delivering remediation.
• The ability to explain technical systems clearly to engineers, customers, auditors, and leadership.
• A record of taking broad, ambiguous security work from design through implementation and production operation.

Desirable Skills:

• Built a security engineering function at an early-stage infrastructure or enterprise software company.
• Secured multi-tenant compute platforms, bare-metal fleets, or customer-managed workloads.
• Worked with macOS, Apple Silicon, host security, secure boot, or hardware-backed credentials.
• Built compliance automation, policy-as-code, or continuous control monitoring.
• Implemented workload identity, artifact signing, build provenance, or isolated build environments.
• Supported enterprise requirements for data residency, customer-managed encryption, or dedicated environments.
• Built security controls for coding agents, computer-use systems, or execution of untrusted code.

Benefits:

• Equity, Full Healthcare

Salary:

• $250,000 Base Salary