Cloud Infrastructure Security Engineer (Systems/Kernel)
New
R
RunpodCloud Infrastructure
Remote - USAFull-TimeSenior
Salary$152,000 - $175,000
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years
- Required Skills
- DockerPythonKubernetesGoRust
Requirements
- 5+ years of experience in infrastructure or systems-level security engineering.
- Extensive knowledge of Linux kernel internals (cgroups, namespaces, eBPF, SELinux/AppArmor).
- Deep understanding of virtualization technologies (KVM, QEMU) and workload/network isolation techniques in multitenant environments.
- Strong systems-level programming skills in C, Go, Rust, or Python.
- Familiarity with GPU architecture and hardware-level security considerations.
- Experience in securing bare-metal cloud infrastructure and mitigating lower-level CVEs.
- Contributions to open-source systems security projects or virtualization research (preferred).
- Experience writing or deploying eBPF-based security tooling (preferred).
- Deep knowledge of low-level networking protocols and virtualized network security (preferred).
Responsibilities
- Design and implement robust workload and network isolation architectures for multitenant GPU bare-metal and virtualized environments.
- Harden Linux kernel configurations, container runtimes (e.g., Docker, containerd), and orchestration layers (e.g., Kubernetes) against breakouts and privilege escalation.
- Conduct deep-dive security assessments and penetration testing specifically targeting our hypervisor, network stack, and hardware interfaces.
- Write code (primarily C, Go, or Rust) to implement custom security controls, telemetry, and fixes at the OS and infrastructure level.
- Evaluate and mitigate security considerations specific to GPU architecture, PCIe pass-through, and shared memory spaces.
- Serve as the technical escalation point for infrastructure-level security incidents, developing forensic capabilities for ephemeral container environments.
View Full Description & ApplyYou'll be redirected to the employer's site
