Staff Security Engineer, Infrastructure

fal; San Francisco (CA); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Competitive salary + equity

Full health, dental, and vision coverage

Opportunity to work on frontier AI infrastructure

Job summary

A leading AI infrastructure company in San Francisco is seeking a Security Engineer, Infrastructure to secure their core systems involving GPU compute, multi-cloud environments, and data pipelines. The role requires 8+ years of experience in security engineering, a strong understanding of cloud security, and expertise in Linux and container security. The ideal candidate will help design security controls that scale with a high-performance AI platform while promoting a culture of security across the organization. Competitive salary and benefits included.

Qualifications

• 8+ years in security engineering, infrastructure, or SRE.
• Experience building or securing production infrastructure at scale.
• Deep knowledge of common vulnerabilities and attack vectors.

Responsibilities

• Design and implement security controls across cloud infrastructure.
• Build security guardrails directly into infrastructure and CI/CD.
• Protect model weights and customer data.

Skills

Cloud security (AWS, GCP, or Azure)

Linux systems and container security (Docker, Kubernetes)

Secrets management and cryptography basics

Proficiency in at least one language (Go, Python)

Strong automation mindset

Tools

Terraform

Job description

We’re looking for a Security Engineer, Infrastructure to secure the core systems that power fal.ai’s platform: GPU compute, multi-cloud environments, networking, and data pipelines. You’ll operate across the full stack, from cloud and Kubernetes to identity, networking, and secrets, designing and implementing security controls that scale with a high-performance AI platform. This role is highly hands‑on and systems‑oriented, sitting at the intersection of security, infrastructure, and distributed systems.

What You’ll Do

Design and implement security controls across:

• Cloud infrastructure
• Kubernetes and containerized workloads
• Networking, service meshes, and edge systems
• CI/CD pipelines and deployment systems
• Secure compute environments for GPU workloads and model execution

Identity, Secrets & Access

• Machine identity and workload authentication
• Secrets management and encryption (e.g., Vault, KMS)
• Least‑privilege access and short‑lived credentials
• Implement Zero Trust principles across infrastructure

Secure AI & Data Systems

• Protect model weights, inference endpoints, and customer data
• Design secure data access pathways and isolation mechanisms

Automation & Security Tooling

• Build security guardrails directly into infrastructure and CI/CD
• Continuously identify and remediate security gaps through automation
• Identify and mitigate risks across infrastructure layers
• Defend against both external attackers and insider threats
• Drive projects like network isolation, encryption, and secure service communication

Cross‑Functional Collaboration

• Partner with platform, infra, and ML teams to drive shift‑left security
• Enable engineers to move fast with secure‑by‑default systems
• Contribute to a strong security culture across the company

What We’re Looking For

Core Requirements

• 8+ years in security engineering, infrastructure, or SRE
• Strong understanding of:
• Cloud security (AWS, GCP, or Azure)
• Linux systems and container security (Docker, Kubernetes)
• Experience building or securing production infrastructure at scale

Security Expertise

Deep knowledge of:

• Secrets management and cryptography basics
• Common vulnerabilities and attack vectors
• Ability to design security controls across multiple layers (infra → app)
• Proficiency in at least one language (Go, Python, or similar)
• Experience with Infrastructure-as-Code (Terraform preferred)
• Strong automation mindset—security should scale with systems

Nice to Have

Experience with:

• GPU infrastructure or ML systems
• Multi‑tenant platform isolation
• Service mesh / zero‑trust architectures
• High‑growth startup environments

What Makes This Role Unique

• Work on cutting‑edge AI infrastructure security (not just SaaS)
• Secure GPU clusters, model execution, and real‑time inference systems
• High ownership: design systems from first principles
• Direct impact on developer trust and platform reliability

Our Security Philosophy

• Automate everything
• Assume breach, design for resilience
• Competitive salary + equity
• Full health, dental, and vision coverage
• Opportunity to work on frontier AI infrastructure

Why fal.ai

You’ll help define what security looks like for the next generation of AI infrastructure—where performance, scale, and safety all matter.