5-7 years of experience securing production systems with sensitive data
Proven incident response experience with real-world scenarios
Strong knowledge of Linux, cloud IAM, networking, and container security
Ability to develop and implement security controls in production environments
Excellent communication skills for clear risk assessment and team collaboration
Responsibilities
Harden cloud and server infrastructure for security across various environments
Develop security telemetry and alerts for suspicious activities
Lead incident response efforts from investigation to recovery
Prioritize and coordinate vulnerability remediation with teams
Establish secure defaults for identity and data access
Conduct threat modeling and penetration testing to enhance security
Benefits
Full visa sponsorship and relocation support
Professional development budget for courses and conferences
Quarterly team off-sites and hackathons
Opportunities to work with a mission-driven team on cutting-edge technology
Full Job Description
Role Impact
Our customers trust us with proprietary models, training data, and the compute that powers them. For frontier labs, large enterprises, and sovereign AI programs, that means protecting sensitive IP across hosted, private, and on-prem environments, with demanding requirements for isolation, access, and data residency. You'll own the security engineering that makes that trust possible across our GPU infrastructure, training platform, and sandboxes.
This is a lead-level IC role based in our San Francisco office, with scope to manage people over time. You'll work closely with our security team, which we expect you to help grow, our CTO, and our Head of Engineering. Responsibilities
Harden cloud, GPU, and server infrastructure across hosted and customer-controlled environments, including Linux, Kubernetes, networking, and tenant isolation.
Build security telemetry, audit trails, detections, and actionable alerts for suspicious access, workload behavior, and data movement.
Lead incident response from investigation and containment through recovery, postmortems, and lasting fixes.
Own vulnerability prioritization and remediation, coordinating urgent patches with infrastructure and product teams.
Build secure defaults for identity, secrets, data access, and deployment pipelines that meet enterprise and sovereign requirements.
Test systems with an attacker's mindset, run threat models and penetration tests, and turn findings into shipped improvements.
Requirements
You've secured critical production systems carrying sensitive customer data or proprietary IP, ideally for demanding enterprises, research labs, or private and on-prem deployments.
You've earned some battle scars responding to real incidents. You can walk us through what happened, what you missed, and what you changed.
You know where Linux, cloud IAM, networking, and container boundaries tend to break, and you've shipped controls that hold up in production.
You can find the hole and write the fix: code, detections, tooling, and infrastructure changes.
You take ownership when the problem is fuzzy, make practical risk calls, and bring people with you through clear communication.
Benefits and Perks
Base salary of $150,000-300,000, plus equity.
Full visa sponsorship and relocation support.
Professional development budget for courses and conferences.
Quarterly team off-sites, hackathons, conferences, and learning opportunities.
Work with a talented, mission-driven team building open superintelligence.
