Staff Security Engineer — Secure AI Platforms

Speedrun Talent Network; San Francisco (CA); On-site; USD 180,000 - 250,000; Full time

Benefits offered by this job

Visa sponsorship & relocation to SF

Health, dental, vision insurance (US)

Team events

Job summary

fal is hiring a Staff Security Engineer to set the technical direction for security across fal.ai. You’ll design and build security controls for multi-cloud and Kubernetes environments, protecting model weights, customer data, and inference endpoints.

You’ll lead security architecture, drive secure-by-default practices, and enable engineers with practical security patterns. You’ll also mentor engineers, run vulnerability management, and advance security across high-risk areas while working with

Qualifications

• AI fluency: you use LLMs, agents, and AI coding tools daily to build, review, and automate security work
• 8+ years of engineering experience, including 5+ in hands-on security engineering
• Deep knowledge of cloud security (AWS/GCP), Kubernetes, Linux, and identity and access systems
• Strong in Python or Rust; you write and ship production code
• A record of security improvements that engineering teams adopted, led without formal authority
• Explains security risk in business terms to engineers and executives alike
• Experience with GPU infrastructure, ML platforms, or multi-tenant compute
• Securing LLM-based systems or agent frameworks, or AI red teaming
• Sandboxing and isolation technologies such as gVisor, Firecracker, or Kata
• Experience supporting SOC 2 or ISO 27001 audits

Responsibilities

• Design isolation for multi-tenant GPU workloads, customer code, and model execution
• Protect model weights, customer data, and inference endpoints with strong identity, encryption, and access controls
• Harden cloud, Kubernetes, CI/CD, and the software supply chain
• Threat model inference, agentic workflows, and internal AI tools, including prompt injection, data leakage, and model supply chain risks
• Build guardrails for agents and AI tools, such as scoped permissions, sandboxing, and audit logging
• Use LLMs and agents to automate security reviews, vulnerability triage, and remediation
• Own the security architecture and the roadmap for our highest-risk areas
• Run design reviews and publish secure patterns that teams can adopt without waiting on security
• Run vulnerability management from discovery through prioritization and fix
• Mentor engineers and raise the security bar across the company

Skills

AI fluency

8+ years Eng

Cloud security

Kubernetes

Python/Rust

Security leadership

LLMs/Agents

Sandboxing

SOC 2 / ISO 27001

Tools

Kubernetes

AWS

GCP

Linux

Python

Rust

Job description

fal is hiring a Staff Security Engineer to set the technical direction for security across fal.ai. You’ll design and build security controls for multi-cloud and Kubernetes environments, protecting model weights, customer data, and inference endpoints.

You’ll lead security architecture, drive secure-by-default practices, and enable engineers with practical security patterns. You’ll also mentor engineers, run vulnerability management, and advance security across high-risk areas while working with