Senior Infra Security Engineer: GPU & Kernel Hardening

Fal.ai Inc.; San Francisco (CA); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Visa sponsorship

Relocation assistance

Health, dental, vision insurance (US)

Team events

Job summary

fal.ai Inc. is seeking a Senior Infrastructure Security Engineer to secure the foundation of fal.ai’s compute platform. You’ll own security below the application layer: the Linux kernel, the hypervisors and sandboxes that isolate workloads, GPU drivers and firmware, and the hosts that run them.

You’ll harden the stack, strengthen isolation against untrusted code, and help make GPU compute safe at scale. Proficiency in building with and using AI is central to this role.

Qualifications

• AI fluency in daily review of code, tooling, and vulnerability research.
• 5+ years in systems or security engineering with Linux kernel/hypervisors.
• Fluent in kernel C; comfortable with Rust, Go, or Python for tooling.
• Strong grasp of virtualization internals: KVM, VFIO, IOMMU/DMA.
• Shipped hardening in production at fleet scale and vulnerable path understanding.

Responsibilities

• Secure Multi-Tenant Isolation: model threats in shared GPU hosts and conduct scrubbing between tenants.
• Harden the Stack: reduce attack surface in kernel builds, GPU drivers, and firmware.
• Assess and Research Vulnerabilities: triage kernel/driver issues and drive fixes.
• Shape the Program: contribute to security roadmap and coordinate with teams and vendors.

Skills

AI fluency

Kernel security

Security tooling

Threat modeling

Virtualization internals

Security research

Rust / Go / Python

Tools

Linux kernel tooling

KVM

VFIO

IOMMU

CUDA

Python

Job description

fal.ai Inc. is seeking a Senior Infrastructure Security Engineer to secure the foundation of fal.ai’s compute platform. You’ll own security below the application layer: the Linux kernel, the hypervisors and sandboxes that isolate workloads, GPU drivers and firmware, and the hosts that run them.

You’ll harden the stack, strengthen isolation against untrusted code, and help make GPU compute safe at scale. Proficiency in building with and using AI is central to this role.