Cloud Infrastructure Security Enginee
Runpod is at the forefront of the AI revolution, empowering over a million developers—from indie researchers to teams deploying frontier models in production—to experiment, train, fine-tune, deploy, and scale AI with unparalleled ease. We've processed over 20 billion inference requests and recently closed a monumental $100M Series A. We're not just building a platform; we're crafting the essential infrastructure for the next generation of AI innovation.
We are a lean, remote-first team where ownership, velocity, and shipping work that impacts millions are core tenets. If you're driven by deep care, build with urgency, and want your contributions to matter at scale, you've found your home.
Learn more about our vision from our CEO's funding announcement: https://www.runpod.io/blog/one-million-developers.
Your Mission: Fortify the Future of AI Infrastructure
As Runpod continues to revolutionize the GPU cloud computing landscape, we are seeking a deeply systems-focused **Cloud Infrastructure Security Engineer**. This is a critical opportunity to safeguard our bare-metal and virtualized environments, ensuring the absolute security, multi-tenant isolation, and integrity of our underlying GPU cloud infrastructure.
We need an innovative security engineer who thrives at the lowest levels of the stack. You will operate with an **Attacker's Mindset**, actively hunting for ways to bypass container and virtualization boundaries, then developing and implementing low-level code to harden our defenses.
The ideal candidate possesses an unparalleled understanding of Linux systems, kernel internals, hypervisors, and containerization. You'll focus on preventing tenant breakouts, securing GPU hardware allocations, and building the most resilient infrastructure to support demanding AI and machine learning workloads.
Key Responsibilities: Systems Isolation Architect: Design and implement cutting-edge workload and network isolation architectures for Runpod's multitenant GPU bare-metal and virtualized environments. Required Qualifications: 5+ years of hands-on experience in infrastructure or systems-level security engineering. Preferred Qualifications: Notable contributions to open-source systems security projects or virtualization research. Why Join Runpod? Competitive Compensation: The base pay for this role ranges from $152,000 - $175,000. This range will be narrowed during the interview process based on experience, qualifications, and location. Runpod is committed to maintaining a workplace free from discrimination and upholding the principles of equality and respect for all individuals. We believe that diversity in all its forms enhances our team. As an equal opportunity employer, Runpod is committed to creating an inclusive workforce at every level. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, protected veteran status, disability status, or any other characteristic protected by law. We welcome every qualified candidate eligible to work in the United States; however, we are currently unable to sponsor employment visas.
Kernel & Container Hardening: Fortify Linux kernel configurations, container runtimes (e.g., Docker, containerd), and orchestration layers (e.g., Kubernetes) against advanced breakouts and privilege escalation attempts.
Deep Infrastructure Threat Modeling: Conduct rigorous security assessments and penetration testing specifically targeting our hypervisor, core network stack, and intricate hardware interfaces.
Proactive Defense Development: Write high-performance code (primarily C, Go, or Rust) to implement custom security controls, advanced telemetry, and immediate fixes directly at the OS and infrastructure level.
GPU Hardware Security Expert: Evaluate and mitigate complex security considerations specific to GPU architecture, PCIe pass-through, and shared memory spaces.
Incident Response & Forensics: Serve as the technical escalation point for infrastructure-level security incidents, developing sophisticated forensic capabilities tailored for ephemeral container environments.
Extensive, proven knowledge of Linux kernel internals (cgroups, namespaces, eBPF, SELinux/AppArmor).
Deep understanding of virtualization technologies (KVM, QEMU) and advanced workload/network isolation techniques in multitenant environments.
Strong systems-level programming skills in C, Go, Rust, or Python.
Familiarity with GPU architecture and hardware-level security considerations.
Demonstrated experience in securing bare-metal cloud infrastructure and effectively mitigating lower-level CVEs.
Hands-on experience writing or deploying eBPF-based security tooling.
Deep knowledge of low-level networking protocols and virtualized network security.
Unleash your potential with a company that values innovation, impact, and a healthy work-life balance.
Meaningful Equity: Everyone on the team receives stock options – your direct impact drives our growth, and you share directly in our success.
Comprehensive Benefits: Generous medical, dental & vision plans to keep you and your family healthy.
Flexible PTO: Take the time you need to recharge and maintain peak performance.
Remote-First Culture: Thrive in an inclusive, collaborative remote environment, with Slack as our primary communication hub.
Cutting-Edge Innovation: Join a passionate team at the vanguard of AI infrastructure, where continuous learning, strong culture, and ownership are central to our scaling.
Home Office & Equipment Stipend: Receive a $1,200 stipend to set up your ideal workspace from day one.