Staff Security Engineer — AI Platform & Multi-Cloud

Fal.ai Inc.; San Francisco (CA); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Visa sponsorship

Relocation assistance

Health insurance

Team events

Learning opportunities

Job summary

fal is hiring a Staff Security Engineer to set the technical direction for security across the platform. You will design security architecture, implement controls, and make secure-by-default the easiest path for engineers working on multi-cloud GPU, Kubernetes, and AI systems.

You’ll mentor teams, run vulnerability management, and evolve secure patterns while collaborating with stakeholders. A strong background in cloud security, Python or Rust, and AI tooling is essential.

Qualifications

• AI fluency: you use LLMs, agents, and AI coding tools daily to build, review, and automate security work.
• 8+ years of engineering experience, including 5+ in hands-on security engineering.
• Deep knowledge of cloud security (AWS/GCP), Kubernetes, Linux, and identity and access systems.
• Strong in Python or Rust; you write and ship production code.
• A record of security improvements that engineering teams adopted, led without formal authority.
• Explains security risk in business terms to engineers and executives alike.
• Experience with GPU infrastructure, ML platforms, or multi-tenant compute.
• Securing LLM-based systems or agent frameworks, or AI red teaming.
• Sandboxing and isolation technologies such as gVisor, Firecracker, or Kata.
• Experience supporting SOC 2 or ISO 27001 audits

Responsibilities

• Secure the Platform: Design isolation for multi-tenant GPU workloads, customer code, and model execution.
• Secure the Platform: Protect model weights, customer data, and inference endpoints with strong identity, encryption, and access controls.
• Secure the Platform: Harden cloud, Kubernetes, CI/CD, and the software supply chain.
• Secure AI Systems: Threat model inference, agentic workflows, and internal AI tools, including prompt injection, data leakage, and model supply chain risks.
• Secure AI Systems: Build guardrails for agents and AI tools, such as scoped permissions, sandboxing, and audit logging.
• Secure AI Systems: Use LLMs and agents to automate security reviews, vulnerability triage, and remediation.
• Set the Technical Direction: Own the security architecture and the roadmap for our highest-risk areas.
• Set the Technical Direction: Run design reviews and publish secure patterns that teams can adopt without waiting on security.
• Set the Technical Direction: Run vulnerability management from discovery through prioritization and fix.
• Set the Technical Direction: Mentor engineers and raise the security bar across the company.

Skills

AI fluency

Security engineering

Cloud security

Python

Rust

LLMs & agents

Tools

AWS

GCP

Kubernetes

Linux

Job description

fal is hiring a Staff Security Engineer to set the technical direction for security across the platform. You will design security architecture, implement controls, and make secure-by-default the easiest path for engineers working on multi-cloud GPU, Kubernetes, and AI systems.

You’ll mentor teams, run vulnerability management, and evolve secure patterns while collaborating with stakeholders. A strong background in cloud security, Python or Rust, and AI tooling is essential.