Staff AI Security Architect

fal - Features & Labels; San Francisco (CA); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Equity

Health, dental, and vision insurance

Team events and offsites

Visa sponsorship

Relocation to San Francisco

Job summary

fal's is seeking a Staff Security Engineer to set the technical direction for security across fal.ai. You will own the security architecture and roadmap for high-risk areas, including multi-tenant GPU workloads, model weights, and delivery pipelines, with day-to-day AI fluency.

You will design secure patterns, run vulnerability management, and mentor engineers while driving security reviews and guardrails across the organization. This role is based in San Francisco with onsite work requirements.

Qualifications

• AI fluency with LLMs, agents, and AI coding tools used daily to build and automate security work.
• 8+ years of engineering experience, including 5+ years in hands-on security engineering.
• Deep knowledge of cloud security (AWS/GCP), Kubernetes, Linux, and IAM systems.
• Proficient in Python or Rust with production code experience.
• Proven track record of security improvements adopted by engineering teams.
• Ability to explain security risk in business terms to engineers and executives.

Responsibilities

• Design isolation for multi-tenant GPU workloads, customer code, and model execution
• Protect model weights, customer data, and inference endpoints with identity, encryption, and access controls
• Harden cloud, Kubernetes, CI/CD, and software supply chain
• Threat model inference and agentic workflows, including risks such as prompt injection, data leakage, and model supply chain threats
• Build AI and agent guardrails, including scoped permissions, sandboxing, and audit logging
• Use LLMs and agents to automate security reviews, vulnerability triage, and remediation
• Own security architecture and roadmap coverage for top-risk areas
• Lead design reviews and publish secure patterns for broader adoption
• Run vulnerability management from discovery through prioritization and fixes
• Mentor engineers and raise the security bar across the company

Skills

AI fluency

LLMs & agents

Python or Rust

Security engineering

Risk communication

Tools

AWS

GCP

Kubernetes

Linux

CI/CD

gVisor

Firecracker

Kata

SOC 2

ISO 27001

Python

Rust

Job description

fal's is seeking a Staff Security Engineer to set the technical direction for security across fal.ai. You will own the security architecture and roadmap for high-risk areas, including multi-tenant GPU workloads, model weights, and delivery pipelines, with day-to-day AI fluency.

You will design secure patterns, run vulnerability management, and mentor engineers while driving security reviews and guardrails across the organization. This role is based in San Francisco with onsite work requirements.