Job description

fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high-performance inference, orchestration, and observability come together to unlock new categories of AI-native products. As generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on. ABOUT THE ROLE We’re looking for a Security Engineer, Infrastructure to secure the core systems that power fal.ai’s platform: GPU compute, multi-cloud environments, networking, and data pipelines. You’ll operate across the full stack, from cloud and Kubernetes to identity, networking, and secrets, designing and implementing security controls that scale with a high-performance AI platform. This role is highly hands-on and systems-oriented, sitting at the intersection of security, infrastructure, and distributed systems. WHAT YOU’LL DO BUILD & HARDEN INFRASTRUCTURE SECURITY Design and implement security controls across: - Cloud infrastructure - Kubernetes and containerized workloads - Networking, service meshes, and edge systems - CI/CD pipelines and deployment systems - Secure compute environments for GPU workloads and model execution IDENTITY, SECRETS & ACCESS - Machine identity and workload authentication - Secrets management and encryption (e.g., Vault, KMS) - Least-privilege access and short-lived credentials - Implement Zero Trust principles across infrastructure SECURE AI & DATA SYSTEMS - Protect model weights, inference endpoints, and customer data - Design secure data access pathways and isolation mechanisms - Ensure safe multi-tenant execution environments AUTOMATION & SECURITY TOOLING - Build security guardrails directly into infrastructure and CI/CD - Use Infrastructure-as-Code (Terraform, Pulumi) to enforce secure defaults - Continuously identify and remediate security gaps through automation THREAT MODELING & RISK REDUCTION - Identify and mitigate risks across infrastructure layers - Defend against both external attackers and insider threats - Drive projects like network isolation, encryption, and secure service communication CROSS-FUNCTIONAL COLLABORATION - Partner with platform, infra, and ML teams to drive shift-left security - Enable engineers to move fast with secure-by-default systems - Contribute to a strong security culture across the company QUALIFICATIONS/NICE TO HAVE: CORE REQUIREMENTS - 8+ years in security engineering, infrastructure, or SRE - Strong understanding of: - Cloud security (AWS, GCP, or Azure) - Networking fundamentals (segmentation, firewalls, Zero Trust) - Linux systems and container security (Docker, Kubernetes) - Experience building or securing production infrastructure at scale SECURITY EXPERTISE Deep knowledge of: - Authentication & authorization systems - Secrets management and cryptography basics - Common vulnerabilities and attack vectors - Ability to design security controls across multiple layers (infra → app) ENGINEERING SKILLS - Proficiency in at least one language (Go, Python, or similar) - Experience with Infrastructure-as-Code (Terraform preferred) - Strong automation mindset—security should scale with systems EXPERIENCE WITH: - GPU infrastructure or ML systems - Multi-tenant platform isolation - Service mesh / zero-trust architectures - High-growth startup environments WHAT WE OFFER AT FAL - Interesting and challenging work - A lot of learning and growth opportunities - We offer visa sponsorship and will help you relocate to San Francisco. - Health, dental, and vision insurance (US) - Regular team events and offsites COMPENSATION - $180,000 - $250,000 + equity + comprehensive benefits package U.S. EQUAL EMPLOYMENT OPPORTUNITY INFORMATION: fal provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law.

Requirements

Must-haves

As generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on.
Cloud infrastructure
Kubernetes and containerized workloads
Networking, service meshes, and edge systems
CI/CD pipelines and deployment systems
Secure compute environments for GPU workloads and model execution
Machine identity and workload authentication
Secrets management and encryption (e.g., Vault, KMS)
Least-privilege access and short-lived credentials
Implement Zero Trust principles across infrastructure
Protect model weights, inference endpoints, and customer data
Design secure data access pathways and isolation mechanisms
Ensure safe multi-tenant execution environments
Build security guardrails directly into infrastructure and CI/CD
Use Infrastructure-as-Code (Terraform, Pulumi) to enforce secure defaults
Continuously identify and remediate security gaps through automation
Identify and mitigate risks across infrastructure layers
Defend against both external attackers and insider threats
Drive projects like network isolation, encryption, and secure service communication
Partner with platform, infra, and ML teams to drive shift-left security
Enable engineers to move fast with secure-by-default systems
Contribute to a strong security culture across the company
8+ years in security engineering, infrastructure, or SRE

Nice-to-haves

Experience with Infrastructure-as-Code (Terraform preferred)

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aikubernetesci/cdmlawsgcpazuredockergopython

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

Pto