Staff Security Engineer, Infrastructure
fal.ai· Engineering
San Francisco$180k - $250kFull-timePosted 3mo ago
About the role
Security-focused role securing fal.ai's infrastructure across GPU compute, multi-cloud, networking, and data pipelines with hands-on, systems-oriented work at the intersection of security, infrastructure, and distributed systems.
Responsibilities
- Design and implement security controls across Cloud infrastructure
- Design and implement security controls across Kubernetes and containerized workloads
- Design and implement security controls across Networking, service meshes, and edge systems
- Design and implement security controls across CI/CD pipelines and deployment systems
- Design and implement security controls for Secure compute environments for GPU workloads and model execution
- Machine identity and workload authentication
- Secrets management and encryption (e.g., Vault, KMS)
- Least-privilege access and short-lived credentials
- Implement Zero Trust principles across infrastructure
- Protect model weights, inference endpoints, and customer data
- Design secure data access pathways and isolation mechanisms
- Ensure safe multi-tenant execution environments
- Build security guardrails directly into infrastructure and CI/CD
- Use Infrastructure-as-Code (Terraform, Pulumi) to enforce secure defaults
- Continuously identify and remediate security gaps through automation
- Identify and mitigate risks across infrastructure layers
- Defend against external attackers and insider threats
- Drive projects like network isolation, encryption, and secure service communication
- Partner with platform, infra, and ML teams to drive shift-left security
- Enable engineers to move fast with secure-by-default systems
- Contribute to a strong security culture across the company
Qualifications
- 8+ years in security engineering, infrastructure, or SRE
- Strong understanding of Cloud security (AWS, GCP, or Azure)
- Strong understanding of Networking fundamentals (segmentation, firewalls, Zero Trust)
- Linux systems and container security (Docker, Kubernetes)
- Experience building or securing production infrastructure at scale
- Deep knowledge of Authentication & authorization systems
- Secrets management and cryptography basics
- Common vulnerabilities and attack vectors
- Ability to design security controls across multiple layers (infra → app)
- Proficiency in at least one language (Go, Python, or similar)
- Experience with Infrastructure-as-Code (Terraform preferred)
- Strong automation mindset—security should scale with systems
- Experience with GPU infrastructure or ML systems
- Experience with multi-tenant platform isolation
- Experience with service mesh / zero-trust architectures
- Experience in high-growth startup environments
Skills
Required:Cloud securityNetworkingLinux and container securityInfrastructure as CodeGo / Python
Benefits
- Visa sponsorship and relocation assistance to San Francisco
- Health, dental, and vision insurance (US)
- Regular team events and offsites
- Interesting and challenging work
- Learning and growth opportunities
- Comprehensive benefits package
Last updated Oct 3, 2026. Interested? Apply on the company site.
About fal.ai
ai-infrastructure-and-developmentwing-list-2026wing-list-2026-late-stage
More open roles at fal.ai
- Account Executive, CommercialyesterdaySF Office · Sales
- Marketing OperationsyesterdaySan Francisco · Marketing
- AI Native Account Executive, ComputeyesterdayRemote · Sales
- Compute Deals1w agoSan Francisco · Operations
- Infrastructure Accounting Lead1w agoSan Francisco · Finance