Senior Security Engineer

New

RunwareAI infrastructure

Workable workplace: remote; Workable locations: United States. United KingdomFull-TimeSenior

Salary not disclosed

Apply NowOpens the employer's application page

Job Details

Bring 8+ years of security or infrastructure engineering experience.
Have several years securing production infrastructure at a company operating its own hardware at scale.
Demonstrate experience building security controls from design through fleet-wide operation.
Have hands-on Linux security expertise, including kernel hardening, namespaces, cgroups, seccomp, eBPF, secure and measured boot, and TPM-based attestation.
Have strong Kubernetes security experience, including RBAC, admission control, policy engines, network policy, runtime security, image signing and SBOMs.
Understand network security on physical hardware, including segmentation, VLAN or VXLAN isolation, firewalls, out-of-band management networks, BMC, IPMI and switch management planes.
Have experience with identity, secrets and PKI at scale, including short-lived credentials, workload identity and hardware-backed keys.
Be fluent in Python or Go and able to build tooling, scanners and automation.
Use AI tools for scripting, log analysis, code review, documentation and incident triage.
Be able to explain security trade-offs to engineers, customer CISOs and founders, and assess risk pragmatically.
Be able to travel to sites in the US and Europe as needed.

Own fleet security architecture, including host hardening, immutable images, signed builds, boot integrity, and identity, secrets and access controls.
Design and verify customer workload isolation across network, Kubernetes, host and GPU layers.
Secure the managed Kubernetes offering through cluster hardening, admission control, RBAC and image supply-chain controls.
Build fleet logging, detection, alerting and audit trails from firmware to API.
Lead security reviews and threat models for new pods, sites, servers and platform features.
Lead infrastructure incident investigation, containment, recovery and post-incident learning as part of the on-call rotation.
Own vulnerability management for firmware, kernels, drivers, GPU stack and container images across the fleet.
Provide engineering evidence for enterprise security due diligence and partner on infrastructure SOC 2 and ISO 27001 controls.
Design sovereign and on-premise security controls for data residency, in-country key management, and physical and remote access.
Automate evidence collection, log triage, configuration audits and runbooks with LLM-based agents.

View Full Description & ApplyYou'll be redirected to the employer's site