Security Engineer, Infrastructure

Serval; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Serval is seeking an Infrastructure Security Lead to design and scale the security foundations of our cloud and platform. You will set the strategy and drive execution across AWS, Kubernetes, container runtimes, and production systems our customers trust us to operate in, making security a property of the infrastructure itself.

As a hands-on leader, you will build and mentor a team in San Francisco, partner closely with Engineering and Product, and ensure secure-by-default infrastructure,

Qualifications

• 10+ years in cybersecurity with cloud and infra security focus.
• Hands-on AWS, Kubernetes, and container runtimes security expertise.
• Experience building and leading security teams and programs.

Responsibilities

• Design and lead an infrastructure security program for cloud and Kubernetes.
• Mentor and grow a security team across cloud security and vulnerability management.
• Embed secure-by-default practices and policy-as-code into engineering.
• Drive risk reduction and secure IAM, network segmentation, and supply chain protections.

Skills

Cloud security

AWS

Kubernetes

Terraform

Leadership

Vulnerability mgmt

Tools

Terraform

CI/CD

Kubernetes security tooling

Job description

Role Overview

As Infrastructure Security Lead, you'll build and scale the foundations of how Serval secures its cloud, compute, and platform infrastructure. You will set the strategy and drive execution for securing our AWS environments, Kubernetes clusters, container runtimes, and the production systems our customers trust us to operate in; making security a property of the infrastructure itself rather than a control bolted on afterward.

You'll be a hands‑on leader with deep technical credibility and strong engineering instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that secure‑by‑default infrastructure, least‑privilege access, and strong isolation boundaries are designed into the systems that power Serval.

What You'll Do

• Design, implement, and operate Serval's infrastructure security program across cloud (AWS), Kubernetes, container runtimes, networking, and CI/CD, including hardening, configuration baselines, workload isolation, and continuous posture management.
• Own cloud and identity security, driving least‑privilege IAM, secrets management, key management, network segmentation, and the guardrails that keep our multi‑tenant production environment safe at scale.
• Secure the container and orchestration stack end‑to‑end. Image provenance and supply‑chain integrity, registry and admission controls, runtime sandboxing and isolation, and Kubernetes hardening (RBAC, network policies, pod security), with particular attention to the isolated workers that execute customer workflows.
• Build, lead, and directly mentor a team spanning cloud security, platform/Kubernetes security, and infrastructure vulnerability management, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow.
• Drive infrastructure vulnerability management and remediation, partnering with engineering to identify, prioritize, and durably close exposure across cloud configuration, dependencies, base images, and the software supply chain.
• Embed security into the platform by design, partnering deeply across Engineering, Product, and Infrastructure so that secure defaults, paved roads, and policy‑as‑code are the easiest path for engineers, not an afterthought.
• Build infrastructure capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier infrastructure‑security and security‑engineering problems.

What You'll Need

• Have 10+ years in cybersecurity with deep expertise in cloud security, infrastructure security engineering, and platform/production hardening.
• Have deep, hands‑on expertise with AWS, Kubernetes, container runtimes (e.g., gVisor/Firecracker‑style isolation), and infrastructure‑as‑code (Terraform).
• Have deep experience building and leading infrastructure/cloud security, platform security, and vulnerability management teams.
• Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people.
• Have strong software‑engineering instincts, comfortable reading and writing code, building tooling and automation, and shipping policy‑as‑code and secure‑by‑default paved roads alongside engineering teams.
• Have deep expertise in cloud and identity security primitives: IAM, secrets and key management, network segmentation, workload isolation, and multi‑tenant boundary design.
• Understand modern adversary tradecraft (TTPs) against cloud and container infrastructure, and have demonstrated experience translating it into practical hardening, isolation, and remediation strategies.
• Are mission‑oriented, have unimpeachable integrity, and are passionate about building resilient, defensible infrastructure in a highly complex, fast‑paced environment.

What We Offer

• Impact: Be a key player in shaping the success of our product and company.
• Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company.
• Culture: Join a culture that values innovation, ownership, accountability, and fun.