Staff Security Engineer, Infrastructure

fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high-performance inference, orchestration, and observability come together to unlock new categories of AI-native products.

As generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on.

About the Role

We’re looking for a Security Engineer, Infrastructure to secure the core systems that power fal.ai’s platform: GPU compute, multi-cloud environments, networking, and data pipelines. You’ll operate across the full stack, from cloud and Kubernetes to identity, networking, and secrets, designing and implementing security controls that scale with a high-performance AI platform. This role is highly hands-on and systems-oriented, sitting at the intersection of security, infrastructure, and distributed systems.

What You’ll Do

Build & Harden Infrastructure Security

Design and implement security controls across:

Cloud infrastructure

Kubernetes and containerized workloads

Networking, service meshes, and edge systems

CI/CD pipelines and deployment systems

Secure compute environments for GPU workloads and model execution

Identity, Secrets & Access

Machine identity and workload authentication

Secrets management and encryption (e.g., Vault, KMS)

Least-privilege access and short-lived credentials

Implement Zero Trust principles across infrastructure

Secure AI & Data Systems

Protect model weights, inference endpoints, and customer data

Design secure data access pathways and isolation mechanisms

Ensure safe multi-tenant execution environments

Automation & Security Tooling

Build security guardrails directly into infrastructure and CI/CD

Use Infrastructure-as-Code (Terraform, Pulumi) to enforce secure defaults

Continuously identify and remediate security gaps through automation

Threat Modeling & Risk Reduction

Identify and mitigate risks across infrastructure layers

Defend against both external attackers and insider threats

Drive projects like network isolation, encryption, and secure service communication

Cross-Functional Collaboration

Partner with platform, infra, and ML teams to drive shift-left security

Enable engineers to move fast with secure-by-default systems

Contribute to a strong security culture across the company

Qualifications/Nice to have:

Core Requirements

8+ years in security engineering, infrastructure, or SRE

Strong understanding of:

Cloud security (AWS, GCP, or Azure)

Networking fundamentals (segmentation, firewalls, Zero Trust)

Linux systems and container security (Docker, Kubernetes)

Experience building or securing production infrastructure at scale

Security Expertise

Deep knowledge of:

Authentication & authorization systems

Secrets management and cryptography basics

Common vulnerabilities and attack vectors

Ability to design security controls across multiple layers (infra → app)

Engineering Skills

Proficiency in at least one language (Go, Python, or similar)

Experience with Infrastructure-as-Code (Terraform preferred)

Strong automation mindset—security should scale with systems

Experience with:

GPU infrastructure or ML systems

Multi-tenant platform isolation

Service mesh / zero-trust architectures

High-growth startup environments

What we offer at fal

Interesting and challenging work

A lot of learning and growth opportunities

We offer visa sponsorship and will help you relocate to San Francisco.

Health, dental, and vision insurance (US)

Regular team events and offsites

Compensation

$180,000 - $250,000 + equity + comprehensive benefits package

U.S. EQUAL EMPLOYMENT OPPORTUNITY INFORMATION:

fal provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law.