Company

Technology

InfrastructureSecurityEngineer

$165–235k ~AI est. San Francisco, California, United States FULL TIME
Market Sentiment
HIGH DEMAND

Neural analysis suggests this role is
optimal for Mid+ candidates.

The Brief

“Infrastructure Security Engineer. Skills: Infrastructure security, Kubernetes security, Supply chain security, Cloud security. Audit and harden multi-cloud Kubernetes clusters. Design authorization, admission, and workload isolation policy”

Industry & Context.

Technology

What They're Looking For.

Must Have

BS in CS, EE, or related field, or equivalent experience, Software engineering skills: Rust, Go, or Python, Linux internals: namespaces, cgroups, seccomp, capabilities, Deep Kubernetes security: authz, admission, workload isolation, runtime defense, Software supply chain security: SBOM, signing, attestation, Identity and secrets management, Experience protecting high-value assets (model weights, training data, or equivalent), Track record in detection, response, and threat modeling, Multi-cloud experience: AWS, GCP, Azure, CoreWeave, Crusoe

What You'll Do.

Audit and harden multi-cloud Kubernetes clusters

and workload isolation policy

Secure the software supply chain from build to

Manage identity and secrets across clusters and accelerators

Protect high-value assets including model weights and training

Build detection and response tooling for clusters

Full Job Description

About the role Own infrastructure security across the systems that train and serve frontier models. Your expertise spans supply chain, identity and secrets, multi-cloud Kubernetes, workload isolation, runtime defense, and detection and response across thousands of compute nodes. What you'll do - Audit and harden multi-cloud Kubernetes clusters - Design authorization, admission, and workload isolation policy - Secure the software supply chain from build to deploy - Manage identity and secrets across clusters and accelerators - Protect high-value assets including model weights and training data - Build detection and response tooling for clusters, workloads, and the underlying fabric What you'll need - BS in CS, EE, or related field, or equivalent experience - Software engineering skills: Rust, Go, or Python - Strong Linux internals: namespaces, cgroups, seccomp, capabilities - Deep Kubernetes security: authz, admission, workload isolation, runtime defense - Software supply chain security: SBOM, signing, attestation - Identity and secrets management - Experience protecting high-value assets (model weights, training data, or equivalent) - Track record in detection, response, and threat modeling - Multi-cloud experience: AWS, GCP, Azure, CoreWeave, Crusoe What we offer - Top-tier compensation structured to recognize and retain the best talent - Meaningful equity - Comprehensive medical, dental, vision, life, and disability insurance - Parental leave for all new parents, including adoptive and surrogate journeys - Flexible PTO - Paid Holidays - Relocation support Equal Employment Opportunity We're an Equal Opportunity Employer and do not discriminate on the basis of any protected status under applicable law.

Free ATS check

Applying for this Infrastructure Security Engineer role?

Most applicants get filtered before a human reads their resume. See if yours makes the cut.

How to Apply on Ashby

  • Ashby is a fast modern ATS — most applications take under 3 minutes.
  • The resume parser is strong; verify parsed experience dates and job titles.
  • Custom screening questions are often scored algorithmically — answer completely.
  • Location field affects geo-based screening; use your actual metro area.

ANONYMOUS · UNFILTERED

What do employees actually say about this company?

Real rants from real employees. Read before you apply.

Read Company Rants →