Senior Linux Kernel & GPU Security Engineer

Speedrun Talent Network; San Francisco (CA); In loco; USD 180.000 - 250.000; Tempo pieno

Vantaggi offerti da questo lavoro

Visa sponsorship

Relocation assistance to San Francisco

Health, dental, and vision insurance (

Team events & offsites

Descrizione del lavoro

fal is hiring a Senior Infrastructure Security Engineer to secure the foundation of our compute platform. You will own security below the application layer, including the kernel, hypervisors, and GPU drivers, and work toward confidential computing and trusted isolation at scale.

You will design, implement, and verify hardware-backed isolation, assess vulnerabilities across stack components, and partner with product and ML teams to ensure a secure development path.

Competenze

• 5+ years in systems or security engineering with hands-on work in kernels, hypervisors, or device drivers.
• Fluent in kernel C; comfortable with Rust, Go, or Python for tooling.
• Strong grasp of virtualization internals and GPU stack components.
• Experience shipping production hardening at fleet scale.
• Published CVEs, talks, or write‑ups on kernel or hypervisor security.

Mansioni

• Secure multi-tenant isolation by building threat models for shared GPU hosts and PCIe/IOMMU boundaries.
• Harden kernel builds and host images with minimal configs, seccomp, and secure boot.
• Assess vulnerabilities in kernel, hypervisors, GPU drivers, and firmware; triage and drive fixes.
• Shape security roadmap and collaborate with teams to make secure paths the default.

Conoscenze

AI fluency

Linux kernel security

Kernel C

Rust/Go/Python

Virtualization internals

NVIDIA GPU stack

Confidential computing

Security research & CVEs

Descrizione del lavoro

fal is hiring a Senior Infrastructure Security Engineer to secure the foundation of our compute platform. You will own security below the application layer, including the kernel, hypervisors, and GPU drivers, and work toward confidential computing and trusted isolation at scale.

You will design, implement, and verify hardware-backed isolation, assess vulnerabilities across stack components, and partner with product and ML teams to ensure a secure development path.