Senior Infrastructure Security Engineer

Skills

About the Role

You'll own security below the application layer: the Linux kernel, hypervisors and sandboxes, GPU drivers and firmware, and the hosts that run them. You'll build threat models for multi-tenant GPU hosts, harden the stack, assess and research vulnerabilities, and help shape the host and isolation security roadmap while using AI tools in your daily work.

Requirements

• AI fluency: daily use of LLMs, agents, and AI coding tools
• 5+ years in systems or security engineering with deep work in Linux kernel, hypervisors, or device drivers
• Fluent in kernel C; comfortable in Rust, Go, or Python
• Strong grasp of virtualization internals: KVM, VFIO, IOMMU/DMA protection
• Has shipped hardening in production at fleet scale
• Has found, triaged, or fixed real vulnerabilities in low-level code
• Communicates risk clearly to different audiences

Responsibilities

• Build and maintain the threat model for running code on shared GPU hosts
• Design and verify GPU memory and device-state scrubbing between tenants
• Roll out hardware-backed isolation including confidential computing and attestation
• Harden kernel builds and host images
• Reduce attack surface in GPU drivers, CUDA runtimes, NVLink/NVSwitch fabrics, BMC, and firmware
• Assess and triage vulnerabilities in the kernel, hypervisors, GPU drivers, and firmware
• Track vendor bulletins and run kernel and driver patching
• Conduct vulnerability research on dependent components
• Contribute to the host and isolation security roadmap and evaluate tooling
• Partner with Detection & Response and act as escalation point for host, kernel, and driver incidents
• Review designs from Infra, Platform, and ML teams
• Work with GPU vendors, cloud providers, and upstream maintainers on disclosure and fixes

Benefits

• Equity
• Visa sponsorship and relocation help to San Francisco
• Health, dental, and vision insurance (US)
• Regular team events and offsites