Staff Security Engineer, InfrastructureSan Francisco

fal; San Francisco (CA); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Competitive salary + equity

Full health, dental, and vision coverage

Opportunity to work on frontier AI infrastructure

Job summary

fal is seeking a Security Engineer, Infrastructure to secure its AI platform's core systems in San Francisco. The role involves building and hardening security across GPU compute, multi-cloud environments, and networking. Candidates should have over 8 years in security engineering and proficiency in languages like Go or Python. Attractive benefits include competitive salary, equity, and full health coverage. This role is pivotal in defining security for cutting-edge AI infrastructure.

Qualifications

• 8+ years in security engineering, infrastructure, or SRE.
• Proficiency in at least one programming language (Go, Python).
• Experience building or securing production infrastructure at scale.

Responsibilities

• Build and harden infrastructure security across cloud and Kubernetes.
• Design security controls for AI systems and data workflows.
• Identify and mitigate security risks across infrastructure layers.

Skills

Cloud security

Networking fundamentals

Linux systems security

Secrets management

Automation mindset

Tools

Terraform

Kubernetes

Docker

Job description

fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high‑performance inference, orchestration, and observability come together to unlock new categories of AI‑native products. As generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on.

About The Role

We’re looking for a Security Engineer, Infrastructure to secure the core systems that power fal.ai’s platform: GPU compute, multi‑cloud environments, networking, and data pipelines. You’ll operate across the full stack, from cloud and Kubernetes to identity, networking, and secrets, designing and implementing security controls that scale with a high‑performance AI platform. This role is highly hands‑on and systems‑oriented, sitting at the intersection of security, infrastructure, and distributed systems.

What You’ll Do

• Build & Harden Infrastructure Security
  • Cloud infrastructure
  • Kubernetes and containerized workloads
  • Networking, service meshes, and edge systems
  • CI/CD pipelines and deployment systems
  • Secure compute environments for GPU workloads and model execution
• Identity, Secrets & Access
  • Machine identity and workload authentication
  • Secrets management and encryption (e.g., Vault, KMS)
  • Least‑privilege access and short‑lived credentials
  • Implement Zero Trust principles across infrastructure
• Secure AI & Data Systems
  • Protect model weights, inference endpoints, and customer data
  • Design secure data access pathways and isolation mechanisms
  • Ensure safe multi‑tenant execution environments
• Automation & Security Tooling
  • Build security guardrails directly into infrastructure and CI/CD
  • Use Infrastructure‑as‑Code (Terraform, Pulumi) to enforce secure defaults
  • Continuously identify and remediate security gaps through automation
• Threat Modeling & Risk Reduction
  • Identify and mitigate risks across infrastructure layers
  • Defend against both external attackers and insider threats
  • Drive projects like network isolation, encryption, and secure service communication
• Cross‑Functional Collaboration
  • Partner with platform, infra, and ML teams to drive shift‑left security
  • Enable engineers to move fast with secure‑by‑default systems
  • Contribute to a strong security culture across the company

Core Requirements

• 8+ years in security engineering, infrastructure, or SRE
• Strong understanding of:
  • Cloud security (AWS, GCP, or Azure)
  • Networking fundamentals (segmentation, firewalls, Zero Trust)
  • Linux systems and container security (Docker, Kubernetes)
  • Experience building or securing production infrastructure at scale

Security Expertise

• Deep Knowledge Of
  • Authentication & authorization systems
  • Secrets management and cryptography basics
  • Common vulnerabilities and attack vectors
  • Ability to design security controls across multiple layers (infra → app)

Engineering Skills

• Proficiency in at least one language (Go, Python, or similar)
• Experience with Infrastructure‑as‑Code (Terraform preferred)
• Strong automation mindset—security should scale with systems

Nice to Have

• Experience with GPU infrastructure or ML systems
• Multi‑tenant platform isolation
• Service mesh / zero‑trust architectures
• High‑growth startup environments

What Makes This Role Unique

• Work on cutting‑edge AI infrastructure security (not just SaaS)
• Secure GPU clusters, model execution, and real‑time inference systems
• High ownership: design systems from first principles
• Direct impact on developer trust and platform reliability

Our Security Philosophy

• Secure‑by‑default > bolt‑on security
• Enable developers, don’t block them
• Automate everything
• Assume breach, design for resilience

Compensation & Benefits

• Competitive salary + equity
• Full health, dental, and vision coverage
• Opportunity to work on frontier AI infrastructure

Why fal.ai

You’ll help define what security looks like for the next generation of AI infrastructure—where performance, scale, and safety all matter.