Member of Technical Staff (Cloud & Infrastructure Security)

Join Fireworks AI as a Security Engineer, where you will design, implement, and operate security controls across AI infrastructure, platforms, and internal systems. You will work closely with multiple teams to strengthen our security posture and support our rapid growth. Your role will involve building security-focused software, performing security reviews, embedding security into CI/CD pipelines, and operating a comprehensive vulnerability management program. You will also participate in red/blue team exercises and embed compliance and regulatory controls into infrastructure and product layers.

• Design and implement security controls across AI infrastructure, platforms, and internal systems.
• Collaborate with multiple teams to strengthen security posture and support rapid growth, ensuring confidentiality, integrity, and availability of data.
• Build and operate a comprehensive vulnerability management program, partnering with various teams to remediate risks across applications, containers, cloud infrastructure, and dependencies.

• Hands-on experience with Kubernetes, Docker, and containerized production environments; deep knowledge of Kubernetes internals and native security controls is a strong plus
• Familiarity with security tooling in managed CI/CD environments (e.g., GitHub Actions, Harness, CircleCI)
• Strong understanding of cloud-native architectures using GCP, particularly in the area of network segregation, authentication, authorization, encryption, data protection, intrusion detection, and cloud-specific security benchmarks
• Solid experience working in Linux environments, including system administration, debugging, and automation via command-line tooling
• Proficient in Python and/or Go with experience in designing production-grade systems
• Familiarity with modern identity and access controls (SAML, OAuth, OIDC, SSO, RBAC/ABAC)
• 3 to 7 years of experience in software engineering or security engineering with a strong focus on security, infrastructure, or cloud-native systems
• Experience designing secure multi-cloud deployments and zero-trust architectures
• Experience designing, operating, and securing large-scale Kubernetes platforms, including control plane security, node hardening, and multi-tenant isolation
• Proficiency with infrastructure-as-code using Terraform and Python, including experience building modular policy-as-code frameworks
• Experience designing, operating, and securing large-scale multi-cloud platforms across AWS, GCP, Azure, Oracle Cloud, and GPU as service cloud providers
• Strong understanding of data protection techniques, including encryption at rest/in transit, tokenization, key management, and confidential computing
• Experience integrating security into microservice architectures, service meshes, and distributed systems
• Hands-on experience securing LLM/ML platforms, model inference infrastructure, GPU clusters, or data labeling pipelines
• Experience designing detection engineering pipelines across cloud audit logs, network telemetry, and application signals
• Experience building large-scale IAM and PAM platforms using least-privilege, workload identity, and just-in-time access
• Familiarity with container image vulnerability remediation, security, SBOM generation, and software supply chain security
• Experience building, implementing and operating security automation platforms for incident response and security operations
• Familiarity with compliance tooling and frameworks (e.g., Vanta, SOC 2, ISO 27001, ISO 42001, PCI-DSS)