Staff Security Engineer, Vulnerability Management (Open Source Infra)

Inferact; San Francisco (CA); Hybride; USD 200 000 - 400 000; Plein temps

Résumé du poste

Inferact in San Francisco, California is seeking a Member of Technical Staff, Vulnerability Management to own the vulnerability process for vLLM. You will investigate reports, reproduce issues, and clearly articulate remediation steps for the core team.

You will coordinate fixes, advisories, and releases, and help establish security best practices as the project evolves. Remote US candidates may be considered for exceptional fit.

Qualifications

• Hands-on product security experience with infrastructure software and security of complex systems.
• Ability to read code, debug unfamiliar systems, reproduce issues, and explain root cause and impact.
• Strong systems reasoning about architecture, trust boundaries, deployment assumptions, and component interactions.
• Ability to learn vLLM's core architecture and independently manage vulnerability investigations.
• Sound prioritization and risk assessment, with clear evidence, remediation needs and next steps.
• Strong written and verbal communication, discretion with sensitive reports, and collaboration with engineers and researchers.

Responsabilités

• Own Inferact's vulnerability-management process for vLLM.
• Investigate vulnerability reports, reproduce issues, and articulate root causes and impact.
• Drive reports from triage through analysis and resolution.
• Coordinate fixes, security advisories, and releases with maintainers and researchers.
• Identify security best practices and strengthen vLLM as it evolves.
• Prepare architecture reviews and regression considerations for fixes.

Connaissances

Product security

Infrastructure security

Code reading

Root cause analysis

Systems thinking

Vulnerability investigations

Documentation & reporting

Communication

Open-source security

Coordination

Description du poste

Inferact in San Francisco, California is seeking a Member of Technical Staff, Vulnerability Management to own the vulnerability process for vLLM. You will investigate reports, reproduce issues, and clearly articulate remediation steps for the core team.

You will coordinate fixes, advisories, and releases, and help establish security best practices as the project evolves. Remote US candidates may be considered for exceptional fit.