Secure-by-Design AI Infra Engineer

Brain Co.; United States; On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Competitive salary

Equity

Daily lunches

Commuter benefits

401(k)

Medical, Dental, and Vision

Unlimited PTO

Job summary

Brain Co. is seeking a Security Engineer, Infrastructure to secure the AI-native platform end-to-end across cloud, Kubernetes, identity, and networking.

This hands-on role writes code, ships infrastructure, and partners with infra and platform teams to build secure-by-default systems. You will implement Zero Trust, manage secrets, authentication and authorization, and harden pipelines and data paths with Terraform.

Qualifications

• 5+ years of security engineering, infrastructure, or SRE experience.
• Fluent in cloud security fundamentals across AWS, GCP, or Azure.
• Experience designing and deploying secure systems end-to-end.
• Hands-on with Kubernetes, container security, and Linux.
• Ability to model threats and translate into concrete controls.
• Experience building with Terraform IaC.
• Experience with authentication/authorization and secrets management.

Responsibilities

• Build security foundations across identity, isolation, secrets management, and access control.
• Harden infrastructure end-to-end, including cloud networking and CI/CD.
• Implement Zero Trust and manage short-lived credentials.
• Protect agent workloads and design secure execution environments.
• Embed security guardrails in deployment workflows via Terraform.
• Own threat modeling across infrastructure layers.
• Collaborate with platform, infra, product, and ML teams.

Skills

Security engineering

Cloud security basics

Kubernetes security

Linux systems

Threat modeling

Terraform IaC

Auth & secrets

Cryptography basics

Tools

Terraform

Job description

Brain Co. is seeking a Security Engineer, Infrastructure to secure the AI-native platform end-to-end across cloud, Kubernetes, identity, and networking.

This hands-on role writes code, ships infrastructure, and partners with infra and platform teams to build secure-by-default systems. You will implement Zero Trust, manage secrets, authentication and authorization, and harden pipelines and data paths with Terraform.