Software Engineer – Platform Security

FriendliAI•San Francisco, CA

About The Position

FriendliAI is seeking a hands-on builder and architect to design and implement the security foundations of a multi-tenant serverless compute platform running on Kubernetes with hardened container isolation. The role owns security design for the control plane and data plane, implements guardrails as code, and partners with Platform, SRE, and Infrastructure teams to deliver a secure-by-default developer experience.

Requirements

  • At least 5 years securing cloud-native platforms, focused on distributed systems and multi-tenancy.
  • Bachelor’s or master’s degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent.
  • Strong hands-on experience with AWS, including IAM, VPC/networking, and logging/monitoring, as well as Kubernetes and container security.
  • Proficiency with Terraform and Helm.
  • Experience building or operating runtime detections for containers or functions.
  • Strong technical background in backend systems, cloud infrastructure, or AI tooling.
  • Clear written and verbal communication skills and ability to translate pricing and business rules into robust systems.

Nice To Haves

  • Experience with Knative or similar serverless-on-Kubernetes frameworks.
  • Experience with container hardening and sandboxing.
  • Experience with policy-as-code and admission policy design at scale.
  • Experience with eBPF-based observability, detections, and signal tuning.
  • Multi-cloud exposure and cross-cloud identity approaches.
  • Hands-on contributions to SOC 2 or HIPAA control automation and audit evidence pipelines.

Responsibilities

  • Design and implement the security architecture for a Kubernetes-based, multi-tenant serverless platform.
  • Build guardrails as code using Terraform and Helm.
  • Establish network segmentation and service-mesh policy.
  • Develop secrets and key management patterns.
  • Implement runtime detections for containerized workloads.
  • Design and roll out IAM and workload identity management.
  • Threat model new features and changes to the overall platform.
  • Collaborate with engineering teams to debug production issues, lead post-incident hardening, and automate evidence for compliance controls.

Benefits

  • Competitive compensation and benefits package.
  • Daily lunch and dinner provided, with unlimited snacks and beverages.
  • Health check-up and top-tier hardware support.
  • Flexible working hours and a highly collaborative environment.
  • A front-row seat to the generative AI infrastructure revolution.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service