About this role:We're hiring a Staff Security Engineer to set the technical direction for security across fal.ai. You'll work across our GPU compute fleet, multi-cloud and Kubernetes environments, inference APIs, and the AI systems our teams build and use. You'll design the security architecture, build the controls yourself, and make secure-by-default the easiest path for every engineer. Proficiency in building with and using AI is central to this role.
What you'll do- Secure the Platform
- Design isolation for multi-tenant GPU workloads, customer code, and model execution
- Protect model weights, customer data, and inference endpoints with strong identity, encryption, and access controls
- Harden cloud, Kubernetes, CI/CD, and the software supply chain
Secure AI Systems
- Threat model inference, agentic workflows, and internal AI tools, including prompt injection, data leakage, and model supply chain risks
- Build guardrails for agents and AI tools, such as scoped permissions, sandboxing, and audit logging
- Use LLMs and agents to automate security reviews, vulnerability triage, and remediation
Set the Technical Direction
- Own the security architecture and the roadmap for our highest-risk areas
- Run design reviews and publish secure patterns that teams can adopt without waiting on security
- Run vulnerability management from discovery through prioritization and fix
- Mentor engineers and raise the security bar across the company
Qualifications/Nice-to-haves- AI fluency: you use LLMs, agents, and AI coding tools daily to build, review, and automate security work
- 8+ years of engineering experience, including 5+ in hands-on security engineering
- Deep knowledge of cloud security (AWS/GCP), Kubernetes, Linux, and identity and access systems
- Strong in Python or Rust; you write and ship production code
- A record of security improvements that engineering teams adopted, led without formal authority
- Explains security risk in business terms to engineers and executives alike
- Experience with GPU infrastructure, ML platforms, or multi-tenant compute
- Securing LLM-based systems or agent frameworks, or AI red teaming
- Sandboxing and isolation technologies such as gVisor, Firecracker, or Kata
- Experience supporting SOC 2 or ISO 27001 audits
What we offer at fal- Interesting and challenging work
- A lot of learning and growth opportunities
- We offer visa sponsorship and will help you relocate to San Francisco.
- Health, dental, and vision insurance (US)
- Regular team events and offsites
Compensation- $180,000 - $250,000 + equity + comprehensive benefits package
