Staff Software Security Engineer

Responsibilities

• Build security for large-scale AI clusters across multiple clouds and bare-metal data centers, including IAM, network segmentation, and encryption controls.
• Design and implement network security controls, including default-deny ingress and egress, segmentation across research, training, and production environments, private connectivity across clouds and data centers, cloud firewall policy, and mTLS with service identity.
• Ship security controls as secure defaults using infrastructure as code and GitOps workflows so new clusters, VPCs, and data center links inherit appropriate boundaries.
• Build visibility into network traffic and boundary drift, including detection of exfiltration paths and safe automated remediation.
• Design secure-by-default development workflows and CI/CD pipelines across services, with Kubernetes security, container orchestration, and identity management.
• Threat model and assess risk for complex multicloud and networked environments.
• Partner with infrastructure networking, cluster, and data center teams during design to incorporate security requirements into topology, routing, and firewall decisions.
• Mentor engineers and contribute to Security team hiring and growth.

Requirements

• 8–15+ years of software engineering experience implementing and maintaining critical systems at scale.
• Strong software engineering skills in Python or a systems language such as Go, Rust, C, or C++.
• Experience operating critical systems at scale using DevOps and cloud automation practices, including infrastructure as code.
• Hands-on network security engineering in cloud or on-premises environments, including VPC design, cloud firewall policy, egress control, private service connectivity, or network segmentation.
• Working knowledge of Kubernetes security and networking, including network policy, service identity, and container hardening.
• Experience with threat modeling and risk assessment for networked and multicloud systems.
• Track record of engineering excellence through high standards, constructive code reviews, and mentorship.
• Clear communication skills and ability to translate technical concepts across organizational levels.
• Experience supporting fast-paced startup engineering teams.
• Bachelor’s degree or equivalent combination of education, training, and experience in a relevant field.

Nice-to-haves

• Secured Kubernetes networking at scale, including CNI, network policy, service mesh, or mTLS rollouts.
• Experience in high-assurance environments where security controls must be evidenced.
• Experience with interconnects and private connectivity between cloud providers and physical data centers.
• Management-plane and out-of-band network security experience.
• Experience building network traffic visibility or exfiltration detection systems.
• Exposure to large-scale distributed training and its networking requirements.
• Experience leading cross-functional security initiatives.
• Experience managing infrastructure through automated configuration and policy enforcement.
• Experience hardening containerized applications and enforcing security policies.

Compensation

• Annual salary: £255,000–£325,000 GBP.