← home

Infrastructure Security Engineer

Material Security United States San Francisco, CA onsite
$266k–$395kestEstimate from 12 posted bands in San Francisco · mid — not the company's offer. Based on 12 similar postings, high confidence.

Estimate from 12 posted bands in San Francisco · mid — not the company's offer. Based on 12 similar postings, high confidence.

Level: Mid, typically 2–6 years. Titles vary by employer; see the levels guide.

Both buttons open the company's own site. We count clicks anonymously and never store who applied.

Skills this posting names

PythonGoRustAWSGCPAzureKubernetesLinuxThreat modelingSupply chain securitySecrets managementAudit

Add your skills on the profile page (kept in this browser only) to see which of these you already have.

About the role

Own infrastructure security across the systems that train and serve frontier models. Your expertise spans supply chain, identity and secrets, multi-cloud Kubernetes, workload isolation, runtime defense, and detection and response across thousands of compute nodes.

What you'll do

  • Audit and harden multi-cloud Kubernetes clusters

  • Design authorization, admission, and workload isolation policy

  • Secure the software supply chain from build to deploy

  • Manage identity and secrets across clusters and accelerators

  • Protect high-value assets including model weights and training data

  • Build detection and response tooling for clusters, workloads, and the underlying fabric

What you'll need

  • BS in CS, EE, or related field, or equivalent experience

  • Software engineering skills: Rust, Go, or Python

  • Strong Linux internals: namespaces, cgroups, seccomp, capabilities

  • Deep Kubernetes security: authz, admission, workload isolation, runtime defense

  • Software supply chain security: SBOM, signing, attestation

  • Identity and secrets management

  • Experience protecting high-value assets (model weights, training data, or equivalent)

  • Track record in detection, response, and threat modeling

  • Multi-cloud experience: AWS, GCP, Azure, CoreWeave, Crusoe

What we offer

  • Top-tier compensation structured to recognize and retain the best talent

  • Meaningful equity

  • Comprehensive medical, dental, vision, life, and disability insurance

  • Parental leave for all new parents, including adoptive and surrogate journeys

  • Flexible PTO

  • Paid Holidays

  • Relocation support

Equal Employment Opportunity

We're an Equal Opportunity Employer and do not discriminate on the basis of any protected status under applicable law.