Staff Security Engineer – AI Platforms & Multi-Cloud

fal; San Francisco (CA); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Visa sponsorship

Relocation to San Francisco

Health, Dental, and Vision insurance

Team events

Job summary

fal is hiring a Staff Security Engineer to set the technical direction for security across fal.ai. You will design the security architecture for multi-cloud, Kubernetes, and AI systems, and implement controls that make secure-by-default the simplest path for engineers.

You will mentor engineers, run vulnerability management, and build guardrails for AI tools and agents, including prompt injection defenses and audit logging.

Qualifications

• AI fluency: you use LLMs, agents, and AI coding tools daily to build, review, and automate security work
• 8+ years of engineering experience, including 5+ in hands-on security engineering
• Deep knowledge of cloud security (AWS/GCP), Kubernetes, Linux, and identity and access systems
• Strong in Python or Rust; you write and ship production code
• A record of security improvements that engineering teams adopted, led without formal authority
• Explains security risk in business terms to engineers and executives alike
• Experience with GPU infrastructure, ML platforms, or multi-tenant compute
• Securing LLM-based systems or agent frameworks, or AI red teaming
• Sandboxing and isolation technologies such as gVisor, Firecracker, or Kata
• Experience supporting SOC 2 or ISO 27001 audits

Responsibilities

• Secure the Platform: Design isolation for multi-tenant GPU workloads, customer code, and model execution
• Protect model weights, customer data, and inference endpoints with strong identity, encryption, and access controls
• Harden cloud, Kubernetes, CI/CD, and the software supply chain
• Secure AI Systems: Threat model inference, agentic workflows, and internal AI tools, including prompt injection, data leakage, and model supply chain risks
• Build guardrails for agents and AI tools, such as scoped permissions, sandboxing, and audit logging
• Use LLMs and agents to automate security reviews, vulnerability triage, and remediation
• Set the Technical Direction: Own the security architecture and the roadmap for our highest-risk areas
• Run design reviews and publish secure patterns that teams can adopt without waiting on security
• Run vulnerability management from discovery through prioritization and fix
• Mentor engineers and raise the security bar across the company

Skills

AI fluency

Hands-on security engineering

Cloud security

Kubernetes

Python or Rust

Security improvements leadership

Security risk communication

GPU infrastructure / multi-tenant

LLMs / AI tooling

Sandboxing technologies

Tools

gVisor

Firecracker

Kata

Linux

Python

Rust

Job description

fal is hiring a Staff Security Engineer to set the technical direction for security across fal.ai. You will design the security architecture for multi-cloud, Kubernetes, and AI systems, and implement controls that make secure-by-default the simplest path for engineers.

You will mentor engineers, run vulnerability management, and build guardrails for AI tools and agents, including prompt injection defenses and audit logging.