Remote-First Full-Stack Security Engineer (AI Infra)

The POD Network; United States; Remote; USD 152,000 - 220,000; Full time

Benefits offered by this job

Equity

Medical/Dental/Vision plans

Flexible PTO

Remote-friendly culture

Slack collaboration

Job summary

Runpod is seeking a Full Stack Security Engineer to secure customer-facing products, APIs, and internal services. You will embed with engineering teams to ensure our product is secure by design and build automated guardrails into CI/CD pipelines.

The role requires 5+ years in application security, proficiency in Python/Go/JS, and hands-on experience with Burp Suite and ZAP. Most roles are remote-first with equity and generous benefits.

Qualifications

• 5+ years of experience in application security, product security, or as a software engineer with a heavy security focus.
• Strong programming and code-review skills in Python, Go, JavaScript/TypeScript, or similar modern stacks.
• Deep understanding of web app vulnerabilities (OWASP Top 10), API security (REST/GraphQL), and modern authentication flows (OAuth, OIDC, JWT).
• Hands-on experience with offensive web security testing tools (Burp Suite, ZAP).
• Experience building and maintaining automated security pipelines (DevSecOps).
• Ability to translate complex security risks into actionable engineering tasks.

Responsibilities

• Lead threat modeling, architecture reviews, and code reviews for web apps, APIs, and microservices.
• Actively develop and commit code to fix security flaws in Python, Go, or JavaScript/TypeScript codebases with the engineering team.
• Implement, tune, and manage security testing tools within CI/CD pipelines to catch vulnerabilities early in the SDLC.
• Configure and manage application-layer security controls (WAF, bot protection, API gateways).
• Provide security guidance, secure coding training, and SOPs to development teams.
• Collaborate with operations to ensure product-level adherence to frameworks (SOC 2, ISO 27001, GDPR) and participate in bug bounty triage.

Skills

Python

Go

JavaScript/TypeScript

OWASP Top 10

Code review

Education

CISSP

GWAPT

OSWE

Tools

Burp Suite

ZAP

CI/CD security tooling

Job description

Runpod is seeking a Full Stack Security Engineer to secure customer-facing products, APIs, and internal services. You will embed with engineering teams to ensure our product is secure by design and build automated guardrails into CI/CD pipelines.

The role requires 5+ years in application security, proficiency in Python/Go/JS, and hands-on experience with Burp Suite and ZAP. Most roles are remote-first with equity and generous benefits.