Member of Technical Staff, Cloud & Infrastructure Security

Fireworks•San Mateo, CA

20h

About The Position

Fireworks is hiring a Member of Technical Staff to own cloud, Kubernetes, and GPU infrastructure security, the software supply chain behind those systems, and detection and response. The role focuses on securing a multi-tenant AI inference platform serving hundreds of open models in production, including isolating tenants on shared accelerators, protecting customer data and model weights across a multi-cloud footprint, and maintaining auditable security as the platform grows. The successful candidate will work across teams to strengthen security and make secure-by-default practices straightforward for engineers. The role includes building security-focused software and platform capabilities, designing tenant isolation across shared GPU infrastructure, reviewing cloud-native architectures, integrating continuous monitoring and automated response, and embedding security in CI/CD. The position also owns vulnerability management, security operations, incident response, and the infrastructure and product compliance posture, initially focused on SOC 2 and ISO 27001.

Requirements

At least 5 years of experience in software engineering or security engineering, with a strong focus on security, infrastructure, or cloud-native systems.
Proficiency in Python and/or Go and experience designing production-grade systems.
Comfort automating in Linux environments and managed CI/CD systems such as GitHub Actions, Harness, or CircleCI.
Production depth in GCP or AWS, including network segregation, authentication, authorization, encryption, data protection, intrusion detection, and cloud-specific security benchmarks.
Hands-on experience with Kubernetes, Docker, and containerized production environments.
Working knowledge of modern identity and access controls, including SAML, OAuth, OIDC, SSO, RBAC/ABAC, least-privilege design, and workload identity.

Nice To Haves

Deep knowledge of Kubernetes internals and native security controls.
Experience designing, operating, and securing large-scale Kubernetes platforms, including control plane security, node hardening, and multi-tenant isolation.
Experience designing, operating, and securing large-scale multi-cloud platforms and zero-trust architectures across AWS, GCP, Azure, Oracle Cloud, and GPU-as-a-service providers.
Proficiency with infrastructure-as-code using Terraform and Python, including building modular policy-as-code frameworks.
Experience designing detection engineering pipelines across cloud audit logs, network telemetry, and application signals.
Experience taking a compliance framework such as SOC 2 or ISO 27001 from control design through audit.
Familiarity with container image vulnerability remediation, SBOM generation, and software supply chain security.

Responsibilities

Design and build security software and platform capabilities to protect customer data, models, and services across multi-cloud infrastructure, including encryption, identity and access management, secure API gateways, secure model execution, and sandboxing.
Design and implement tenant isolation across shared GPU and accelerator infrastructure, including host, device, scheduler, and model artifact boundaries.
Review cloud-native architectures, including Kubernetes clusters, multi-cloud workloads, and distributed data stores.
Build integrated systems for continuous security monitoring, anomaly detection, and automated response.
Embed security in CI/CD pipelines through automated scanning, policy enforcement, and secure-by-default build and deployment workflows.
Develop in-house security tooling and automation where it offers better control, scalability, and integration than off-the-shelf solutions.
Build and operate a vulnerability management program, partnering with teams to remediate risks across applications, containers, cloud infrastructure, and dependencies.
Operate and improve security operations, including detection engineering, alert triage, incident response, and post-incident reviews.
Participate in red/blue team exercises, tabletop simulations, and post-incident root cause analysis.
Own the infrastructure and product compliance posture, starting with SOC 2 and ISO 27001, by embedding controls into the platform.