← All roles

AI Infrastructure Security Engineer

Brain Co.· Engineering
Apply on company site
San Francisco Bay Area, New York City, NY, London, RemoteFull-timePosted 11mo ago

About the role

Security-focused role building and securing Brain Co.'s AI-native platform infrastructure, with ownership from cloud and Kubernetes security to identity, networking, and data/workflow protections in an AI-native environment.

Responsibilities

  • Build the security foundations of our AI platform: identity, isolation, secrets management, and access control across cloud and Kubernetes environments.
  • Harden infrastructure end-to-end from cloud networking and service meshes to CI/CD pipelines and the data and model pipelines powering Brain Co's AI capabilities work.
  • Implement Zero Trust principles and machine identity across workloads; short-lived credentials, least-privilege access, and encrypted service communication.
  • Protect customer data and the agent workloads running on our platform. Design secure execution environments and data access pathways for code and actions taken by agents on our systems.
  • Build security guardrails directly into infrastructure and deployment workflows using Infrastructure-as-Code (Terraform) so security scales with the platform.
  • Own threat modeling across infrastructure layers—identifying and remediating risks before they become incidents.
  • Own security for Brain Co's forward-deployed infrastructure — designing and hardening bespoke VPCs and customer-environment deployments where every engagement brings its own unique attack surface.
  • Partner with platform, infra, product, and ML teams to ship code and infrastructure together as a true partner so engineers move fast with secure-by-default systems.

Qualifications

  • Have 5+ years of experience in security engineering, infrastructure, or SRE with hands-on experience building or securing production systems at scale.
  • Are fluent in cloud security fundamentals (IAM, networking, KMS, secrets, isolation) across AWS, GCP, or Azure.
  • Have designed and implemented secure systems end-to-end not just reviewed them after the fact.
  • Have hands-on experience with Kubernetes, container security, and Linux systems.
  • Think in terms of threat models, trust boundaries, and failure modes and can translate that into concrete controls.
  • Enjoy building paved roads and guardrails using Infrastructure-as-Code (Terraform preferred) so the whole team moves faster safely.
  • Have experience with authentication and authorization systems, secrets management, and cryptography basics.
  • Are a hands-on builder who is energized by writing code, shipping infrastructure, and partnering directly with infra and platform engineers rather than advising from the sidelines.
  • Thrive in ambiguous, high-agency environments and want ownership of the infrastructure security function as it grows.

Skills

Required:Security engineeringKubernetesInfrastructure as CodeThreat modelingIdentity and access management

Benefits

  • Competitive salary plus equity
  • Daily lunches
  • Commuter benefits
  • 401(k)
  • Medical, Dental, and Vision
  • Unlimited PTO
Last updated Aug 5, 2026. Interested? Apply on the company site.

About Brain Co.

AI for the world's most important institutions

Building an AI platform and applications to deliver impact for real-world problems.

AIPlatformApplicationsInstitutions
Company profileWebsite

More open roles at Brain Co.