Security Engineer, Cloud Infra (Kernel/Hypervisor)

RunPod; United States; Remote; USD 152,000 - 175,000; Full time

Benefits offered by this job

Equity in fast-growing company

Flexible PTO

Remote-friendly

Home office stipend

Job summary

Runpod is hiring a systems-focused Cloud Infrastructure Security Engineer to guard bare-metal and virtualized GPU environments. You will prevent tenant breakouts, secure hardware allocations, and build resilient infrastructure for AI workloads.

The role emphasizes an attacker mindset, hunting for container and virtualization boundary breaches, and writing low-level code to patch them using C, Go, or Rust. remote-friendly, with comprehensive benefits.

Qualifications

• 5+ years of infrastructure or systems security engineering experience.
• Extensive knowledge of Linux kernel internals (cgroups, namespaces, eBPF, SELinux/AppArmor).
• Deep understanding of virtualization technologies (KVM, QEMU) and isolation in multitenant environments.
• Strong systems-level programming skills in C, Go, Rust, or Python.
• Familiarity with GPU architecture and hardware-level security considerations.
• Experience in securing bare-metal cloud infrastructure and mitigating low-level CVEs.

Responsibilities

• Design and implement robust workload and network isolation for RunPod's multitenant GPU bare-metal and virtualized environments.
• Harden Linux kernel configurations, container runtimes (e.g., Docker, containerd), and orchestration layers (e.g., Kubernetes) against breakouts and privilege escalation.
• Conduct security assessments and penetration testing targeting hypervisor, network stack, and hardware interfaces.
• Write code (primarily C, Go, or Rust) to implement security controls, telemetry, and fixes at the OS and infrastructure level.
• Evaluate and mitigate security considerations specific to GPU architecture, PCIe pass-through, and shared memory spaces.
• Serve as the technical escalation point for infrastructure-level security incidents and develop forensic capabilities.

Skills

Linux kernel internals

KVM / QEMU virtualization

C/Go/Rust systems programming

GPU architecture security

Bare-metal cloud security

eBPF

Tools

Docker

containerd

Kubernetes

Job description

Runpod is hiring a systems-focused Cloud Infrastructure Security Engineer to guard bare-metal and virtualized GPU environments. You will prevent tenant breakouts, secure hardware allocations, and build resilient infrastructure for AI workloads.

The role emphasizes an attacker mindset, hunting for container and virtualization boundary breaches, and writing low-level code to patch them using C, Go, or Rust. remote-friendly, with comprehensive benefits.