Security Engineer: AI Infra & Cloud Security

Fireworks AI; San Mateo (CA); On-site; USD 180,000 - 220,000; Full time

Job summary

Fireworks AI is seeking a Security Engineer to design, implement, and operate security controls across our AI infrastructure and internal systems. You will strengthen security posture, embed protections in CI/CD, and work with multiple teams to safeguard data, models, and services.

The role emphasizes building in-house tooling, vulnerability management, and compliance with SOC 2, ISO 27001, GDPR. Location is San Mateo, CA with on-site expectations.

Qualifications

• 3 to 7 years of software/security engineering experience focused on security, infra, or cloud-native systems.
• Proficient in Python and/or Go with production-grade system design experience.
• Experience with Kubernetes, Docker, and cloud-native security controls.
• Familiar with CI/CD tools and security tooling in managed environments.

Responsibilities

• Design and build security-focused software and platform capabilities across multi-cloud infrastructure.
• Review cloud-native architectures and implement continuous security monitoring and automated response.
• Embed security into CI/CD with automated scanning and secure-by-default workflows.
• Develop in-house security tooling to improve control and scalability.
• Maintain a comprehensive vulnerability management program across apps and cloud.
• Operate security operations including detection engineering and incident response.
• Participate in red/blue exercises and post-incident analysis.
• Embed compliance controls (SOC 2, ISO 27001, GDPR) into infra and product layers.

Skills

Python

Go

Kubernetes

Docker

CI/CD

Linux

SAML/OIDC

OAuth

Tools

GitHub Actions

Harness

CircleCI

Terraform

Job description

Fireworks AI is seeking a Security Engineer to design, implement, and operate security controls across our AI infrastructure and internal systems. You will strengthen security posture, embed protections in CI/CD, and work with multiple teams to safeguard data, models, and services.

The role emphasizes building in-house tooling, vulnerability management, and compliance with SOC 2, ISO 27001, GDPR. Location is San Mateo, CA with on-site expectations.