Security Engineer, Infrastructure Security
Designs and builds security controls for infrastructure including GPU clusters, multi-cloud setups, datacenters, Kubernetes, and networks to protect AI models and data from advanced threats. Requires deep security expertise, cloud platform knowledge, and proactive problem-solving across on-prem and cloud environments.
About the job
Responsibilities
- Design and build security controls across diverse layers (e.g., physical hardware, firmware/BMC, OS, Kubernetes, networks, and CI/CD) to defend against sophisticated adversaries and insider threats.
- Collaborate with engineering and security teams to drive deployment of security enhancements and control changes across broad-scale infrastructure.
- Tackle high-impact projects such as checkpoint encryption, network isolation, secret management, and machine identity, while continuously raising the security bar for emerging AI workloads.
- Take a generalist approach to building security controls, balancing a mix of security expertise and broad technical skillsets to adapt to evolving challenges.
Requirements
- Deep understanding of security principles, best practices, and common vulnerabilities.
- Proactive mindset, with the ability to identify and address security gaps or inefficiencies through automation and tooling.
- Track record of delivering scalable solutions and driving impactful changes across infrastructure in real-world projects.
- Expertise in the security of cloud platforms (e.g., Amazon AWS, Microsoft Azure), especially securing multi-cloud networks and infrastructure, and designing cloud agnostic systems.
- Experience securing on-prem deployments and datacenters from construction to multi-tenant use.
- Familiarity with container security, orchestration security, and authentication/authorization.
- Strong analytical and problem-solving skills, with an ability to think critically and objectively assess security risks.
- Excellent communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders.
- Excitement about collaborating with cross-functional teams to build secure, reliable systems that scale globally.
Skills
Kubernetes, AWS, Azure, CI/CD, Container Security, Network Security, Secret Management, Cloud Security, Datacenter Security, Firmware Security
Similar jobs
Security Engineering jobsBuild and lead a Security Quality Management System for agentic and human-led SOC investigations, establishing quality standards, sampling, validation, reporting, and corrective actions. The role requires 5+ years in quality, governance, operational excellence, or controls, plus security operations and people-management experience.
Develop and maintain secure platform software spanning authentication, authorization, communications, data access, and automated security testing. The role requires 5+ years of security-focused software development experience, strong coding skills, and expertise in cloud and container security.
Leads vulnerability management and application-security initiatives across the technology stack, securing operating-system images, open-source dependencies, CI/CD pipelines, containers, and cloud-native systems. Requires 5+ years of application-security experience, coding ability, and expertise in vulnerability-scanning practices.
Own and strengthen Onebrief’s corporate security stack across endpoints, identity, SaaS, Zero Trust, and monitoring. The role emphasizes security automation, configuration-baseline enforcement, telemetry integration, and continuously validated compliance controls.
The Security Engineer will secure cloud infrastructure, engineering systems, APIs, model-training environments, and GPU clusters while supporting rapid delivery. The role requires hands-on cloud security, IAM, secrets and certificate management, compliance ownership, vulnerability monitoring, and incident response experience.