← All roles

Member of Technical Staff — Security

RadixArk· Member of Technical Staff
Apply on company site
Hybrid (Remote / Hybrid (global))full-timePosted 4w ago

About the role

Security-focused role to build foundational security practices, prepare for vendor audits and SOC 2 readiness, and embed security across infrastructure, products, and operations at an early-stage AI infrastructure company.

Responsibilities

  • Build and document internal security architecture, controls, and practices
  • Create threat models for systems and products that interact with customer data
  • Develop an Incident Response Plan (IRP) and Business Continuity/Disaster Recovery (BC/DR) plan
  • Establish vulnerability and patch management processes with clear SLAs
  • Prepare security documentation for vendor audits, including SOC 2 readiness
  • Define systems and data handling for SOC 2 audit scope
  • Create and maintain an inventory of infrastructure, applications, and third-party dependencies
  • Classify data flows and security boundaries between in-house and outsourced components
  • Document which security controls are managed internally vs. outsourced to vendors (AWS, GCP, etc.)
  • Review and improve network security: firewalls, IDS/IPS, DDoS mitigation
  • Audit API authentication, authorization, rate limiting, and multi-tenancy isolation
  • Implement secrets management and secure configuration practices
  • Review cloud IAM, networking, and data protection (encryption in transit and at rest)
  • Evaluate container and supply-chain security practices
  • Design and implement security logging and monitoring systems
  • Set up SIEM/SOAR tooling or integrate centralized logging
  • Establish security alerting, incident response procedures, and runbooks
  • Conduct regular vulnerability scans and penetration tests
  • Develop security processes to answer vendor questionnaires and RFPs
  • Create documentation for customers on security controls, certifications, and data handling
  • Lead the SOC 2 audit process—coordinate with internal teams and external auditors
  • Stay informed on relevant compliance frameworks (SOC 2, HIPAA, Export Control, etc.)
  • Enforce secure development practices to engineers
  • Help teams understand threat models relevant to their work
  • Build security into CI/CD pipelines and deployment processes

Qualifications

  • 4+ years working on security, infrastructure, or backend systems (or equivalent combination of hands-on experience and security training)
  • Strong understanding of cloud platforms: AWS, GCP, or Azure (IAM, networking, data protection, secrets management)
  • Proficiency in Linux/Unix system administration and command-line tools
  • Hands-on experience with Kubernetes, container security, or infrastructure-as-code
  • Solid understanding of network security, authentication/authorization protocols, and cryptography basics
  • Experience conducting vulnerability assessments, penetration testing, or security audits
  • Demonstrated experience building or improving security programs (threat modeling, security architecture, incident response)
  • Knowledge of secure coding practices, OWASP Top 10, and common vulnerability types (SQLi, XSS, CSRF, etc.)
  • Familiarity with security tools: vulnerability scanners, SIEM, secret management systems, IDS/IPS
  • Understanding of regulatory compliance frameworks (SOC 2 is a plus; export control is a major plus for us)
  • Background in founding or early-stage startups—you understand scrappy, pragmatic security
  • Experience with ML infrastructure, GPU/compute management, or high-performance systems
  • Involvement in SOC 2 audits or other compliance programs
  • Experience writing security policies, playbooks, and operational runbooks
  • Familiarity with supply-chain security, open-source risk, or dependency management
  • Bachelor's degree in Computer Science, Engineering, Cybersecurity, or equivalent professional experience
  • Relevant security certifications (CISSP, CISM, CEH, OSCP, etc.) are a plus but not required

Skills

Required:Security architecture and threat modelingIncident response planningCloud security (AWS/GCP/Azure)Kubernetes and container security
Last updated Sep 22, 2026. Interested? Apply on the company site.
RadixArk logo

About RadixArk

SHIP AI FOR ALL

RadixArk is an infrastructure-first, deep-tech company building large-scale inference and training systems for the entire AI community.

AI systemsMilesSGLangbessemer-ai-infrastructure-2026inferenceinference-inflection-pointinfrastructureopen infrastructure
Company profileWebsite

More open roles at RadixArk