Remote Cloud Infra Security Engineer: Kernel & Hypervisor

Runpod; United States; Remote; USD 152,000 - 175,000; Full time

Benefits offered by this job

Equity/Stock options

Medical, dental & vision plans

Flexible PTO

Remote-first / async collaboration

Home office stipend

Job summary

Runpod, the AI Developer Cloud, seeks a systems-focused Cloud Infrastructure Security Engineer to safeguard our GPU cloud infrastructure—bare-metal and virtualized environments—ensuring strong multi-tenant isolation and platform integrity.

You will harden Linux kernel configurations, container runtimes, and orchestration layers; write low-level code (C/Go/Rust); and focus on diagnosing and preventing tenant breakouts while protecting GPU hardware interfaces.

Qualifications

• 5+ years of experience in infrastructure or systems-level security engineering.
• Extensive knowledge of Linux kernel internals (cgroups, namespaces, eBPF, SELinux/AppArmor).
• Deep understanding of virtualization technologies (KVM, QEMU) and multitenant isolation.
• Strong systems-level programming skills in C, Go, Rust, or Python.
• Familiarity with GPU architecture and hardware security considerations.

Responsibilities

• Systems Isolation: Design and implement robust workload and network isolation architectures for Runpod's multitenant GPU bare-metal and virtualized environments.
• Kernel & Container Security: Harden Linux kernel configurations, container runtimes (e.g., Docker, containerd), and orchestration layers (e.g., Kubernetes) against breakouts and privilege escalation.
• Infrastructure Threat Modeling: Conduct deep-dive security assessments and penetration testing specifically targeting our hypervisor, network stack, and hardware interfaces.
• Active Defense: Write code (primarily C, Go, or Rust) to implement custom security controls, telemetry, and fixes at the OS and infrastructure level.
• Hardware Security: Evaluate and mitigate security considerations specific to GPU architecture, PCIe pass-through, and shared memory spaces.
• Incident Response: Serve as the technical escalation point for infrastructure-level security incidents, developing forensic capabilities for ephemeral container environments.

Skills

Infrastructure security

Linux kernel internals

Virtualization technologies

C/Go/Rust/Python

GPU hardware security

Tools

Docker

containerd

Kubernetes

QEMU

Job description

Runpod, the AI Developer Cloud, seeks a systems-focused Cloud Infrastructure Security Engineer to safeguard our GPU cloud infrastructure—bare-metal and virtualized environments—ensuring strong multi-tenant isolation and platform integrity.

You will harden Linux kernel configurations, container runtimes, and orchestration layers; write low-level code (C/Go/Rust); and focus on diagnosing and preventing tenant breakouts while protecting GPU hardware interfaces.