СШАSenior Infrastructure Security Engineer
2 дн. назад
180k–250k USD / годСШАSenior
linux kernelgpu drivershardware-backed isolationsecurity threat modelingcontainer securitymicrovm
Secure the foundation of AI compute platform infrastructure focusing on Linux kernel, hypervisors, GPU drivers, and host security to ensure safe multi-tenant GPU compute at scale.
О компании
- We’re hiring a Senior Infrastructure Security Engineer to secure the foundation of ’s compute platform. You’ll own security below the application layer: the Linux kernel, the hypervisors and sandboxes that isolate workloads, GPU drivers and firmware, and the hosts that run them. You’ll harden the stack, strengthen isolation against untrusted code, and help make GPU compute safe at scale. Proficiency in building with and using AI is central to this role.
Обязанности
- Secure Multi-Tenant Isolation Build and maintain the threat model for running code on shared GPU hosts, from containers and microVM down to PCIe, IOMMU, and GPU passthrough
- Design and verify GPU memory and device-state scrubbing between tenants
- Help roll out hardware-backed isolation where it fits, including confidential computing and attestation
Будет плюсом
- AI fluency: you use LLMs, agents, and AI coding tools daily to review code, build tooling, and accelerate vulnerability research
- 5+ years in systems or security engineering, with deep hands-on work in the Linux kernel, hypervisors, or device drivers
- Fluent in kernel C, and comfortable in Rust, Go, or Python for tooling
- Strong grasp of virtualization internals: KVM, VFIO, IOMMU/DMA protection, and the tradeoffs between containers, sandboxes, and microVMs
- Has shipped hardening that runs in production at fleet scale
- Has found, triaged, or fixed real vulnerabilities in low-level code and can explain the exploit path
- Communicates risk clearly to different audiences, from kernel engineers to executives
- NVIDIA GPU stack experience: open kernel modules, GSP firmware, MIG, vGPU, or GPU confidential computing
- Confidential computing more broadly: AMD SEV-SNP, Intel TDX, attestation
- Published CVEs, talks, or write-ups on kernel or hypervisor security
- Prior work at a GPU cloud, hyperscaler, or chip vendor
Условия
- Interesting and challenging work
- A lot of learning and growth opportunities
- We offer visa sponsorship and will help you relocate to San Francisco.
- Health, dental, and vision insurance (US)
- Regular team events and offsites
- $180,000 - $250,000 + equity + comprehensive benefits package
Другое
- fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high-performance inference, orchestration, and observability come together to unlock new categories of AI-native products.
- As generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on.
- Harden kernel builds and host images: config minimization, LSMs, seccomp, namespace and cgroup policy, secure and measured boot
- Reduce attack surface in GPU drivers, CUDA runtimes, NVLink/NVSwitch fabrics, BMC, and firmware
- Assess and triage security vulnerabilities in the kernel, hypervisors, GPU drivers, and firmware: judge exploitability and real impact on environment, set severity, and drive fixes or mitigations
- Track vendor bulletins and upstream disclosures, and run kernel and driver patching that keeps pace without disrupting the fleet
- Conduct vulnerability research on the components we depend on
- Contribute to the host and isolation security roadmap and evaluate tooling
- Partner with Detection & Response on telemetry, and act as the escalation point for host, kernel, and driver incidents
- Review designs from Infra, Platform, and ML teams, and help make the secure path the default
- Work with GPU vendors, cloud providers, and upstream maintainers on disclosure and fixes