← All roles

Security Engineer, Infrastructure

Serval· Engineering
Apply on company site
San Francisco$200k - $325k + equityFull-timePosted 3mo ago

About the role

Infrastructure-focused security leadership role responsible for securing Serval's cloud, Kubernetes, container runtimes, and production systems; leads a security-focused team and embeds security-by-default into the platform.

Responsibilities

  • Design, implement, and operate Serval's infrastructure security program across cloud (AWS), Kubernetes, container runtimes, networking, and CI/CD, including hardening, configuration baselines, workload isolation, and continuous posture management.
  • Own cloud and identity security, driving least-privilege IAM, secrets management, key management, network segmentation, and guardrails for a multi-tenant production environment.
  • Secure the container and orchestration stack end-to-end: image provenance and supply-chain integrity, registry and admission controls, runtime sandboxing and isolation, and Kubernetes hardening (RBAC, network policies, pod security).
  • Build, lead, and mentor a team spanning cloud security, platform/Kubernetes security, and infrastructure vulnerability management, scaling with growth.
  • Drive infrastructure vulnerability management and remediation, partnering with engineering to close exposure across cloud configuration, dependencies, base images, and the software supply chain.
  • Embed security into the platform by design, promoting secure defaults, paved roads, and policy-as-code across Engineering, Product, and Infrastructure.
  • Build infrastructure capable of withstanding sophisticated adversaries, including using Serval's own agents to solve security problems.

Qualifications

  • 10+ years in cybersecurity with deep expertise in cloud security, infrastructure security engineering, and platform/production hardening.
  • Deep, hands-on expertise with AWS, Kubernetes, container runtimes (e.g., gVisor/Firecracker-style isolation), and infrastructure-as-code (Terraform).
  • Deep experience building and leading infrastructure/cloud security, platform security, and vulnerability management teams.
  • Stellar leadership skills and a history of durable, continuous improvements to programs, processes, and people.
  • Strong software-engineering instincts, able to read and write code, build tooling and automation, and ship policy-as-code and secure-by-default paved roads.
  • Deep expertise in cloud and identity security primitives: IAM, secrets and key management, network segmentation, workload isolation, multi-tenant boundary design.
  • Understanding of modern adversary tradecraft against cloud and container infrastructure, with proven hardening, isolation, and remediation strategies.

Skills

Required:AWSKubernetesContainer runtimes (gVisor/Firecracker-style isolation)TerraformIAM / Secrets / Key management

Benefits

  • Meaningful early-stage equity
  • comprehensive health coverage
  • flexible PTO
  • daily lunches and snacks
  • onsite gym access
  • regular team events and offsites
Last updated Aug 19, 2026. Interested? Apply on the company site.

About Serval

AI Agents for IT

Serval is the AI-native ITSM for modern teams. Use natural language to automate routine tasks and resolve help desk requests.

AI guidanceIT operationsITSMai-agents-and-applicationsautomationhelpdeskknowledge basesecurity
Company profileWebsite

More open roles at Serval