# Staff Security Engineer **Company:** [Fal](https://zerogtalent.com/ai-companies/features-and-labels) **Location:** San Francisco **Work mode:** On-site **Seniority:** Senior **Employment type:** Full Time **Salary:** USD 180K–250K/yr **Category:** Security **Department:** Other **Listed:** 2026-11-06 [View and apply on Zero G Talent](https://zerogtalent.com/ai-jobs/features-and-labels/staff-security-engineer-c3442fcd-8679-41a3-ad16-b1e1883d916c) ## What you'll do - Design isolation for multi-tenant GPU workloads and model execution - Protect model weights, customer data, inference endpoints - Harden cloud, Kubernetes, CI/CD, software supply chain - Threat model inference, agentic workflows, internal AI tools - Own security architecture and roadmap for highest-risk areas ## What you need - 8+ yrs engineering, 5+ hands-on security engineering - Cloud security (AWS/GCP), Kubernetes, Linux, IAM expertise - Python or Rust; write and ship production code - Daily use of LLMs, agents, AI coding tools - GPU infrastructure, ML platforms, or multi-tenant compute ## Job description fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high-performance inference, orchestration, and observability come together to unlock new categories of AI-native products. As generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on. ### **About this role:** We’re hiring a Staff Security Engineer to set the technical direction for security across [fal.ai](http://fal.ai). You’ll work across our GPU compute fleet, multi-cloud and Kubernetes environments, inference APIs, and the AI systems our teams build and use. You’ll design the security architecture, build the controls yourself, and make secure-by-default the easiest path for every engineer. Proficiency in building with and using AI is central to this role. ### **What you’ll do** - **Secure the Platform** - Design isolation for multi-tenant GPU workloads, customer code, and model execution - Protect model weights, customer data, and inference endpoints with strong identity, encryption, and access controls - Harden cloud, Kubernetes, CI/CD, and the software supply chain **Secure AI Systems** - Threat model inference, agentic workflows, and internal AI tools, including prompt injection, data leakage, and model supply chain risks - Build guardrails for agents and AI tools, such as scoped permissions, sandboxing, and audit logging - Use LLMs and agents to automate security reviews, vulnerability triage, and remediation **Set the Technical Direction** - Own the security architecture and the roadmap for our highest-risk areas - Run design reviews and publish secure patterns that teams can adopt without waiting on security - Run vulnerability management from discovery through prioritization and fix - Mentor engineers and raise the security bar across the company ### **Qualifications/Nice-to-haves** - AI fluency: you use LLMs, agents, and AI coding tools daily to build, review, and automate security work - 8+ years of engineering experience, including 5+ in hands-on security engineering - Deep knowledge of cloud security (AWS/GCP), Kubernetes, Linux, and identity and access systems - Strong in Python or Rust; you write and ship production code - A record of security improvements that engineering teams adopted, led without formal authority - Explains security risk in business terms to engineers and executives alike - Experience with GPU infrastructure, ML platforms, or multi-tenant compute - Securing LLM-based systems or agent frameworks, or AI red teaming - Sandboxing and isolation technologies such as gVisor, Firecracker, or Kata - Experience supporting SOC 2 or ISO 27001 audits ### **What we offer at fal** - Interesting and challenging work - A lot of learning and growth opportunities - We offer visa sponsorship and will help you relocate to San Francisco. - Health, dental, and vision insurance (US) - Regular team events and offsites ### **Compensation** - $180,000 - $250,000 + equity + comprehensive benefits package **U.S. EQUAL EMPLOYMENT OPPORTUNITY INFORMATION:** fal provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law. ## Other open roles at Fal - [Senior Infrastructure Security Engineer](https://zerogtalent.com/ai-jobs/features-and-labels/senior-infrastructure-security-engineer-d47e9698-cecf-4376-8791-d9c38c672712) — San Francisco - [Enterprise Account Executive Manager, NAMER](https://zerogtalent.com/ai-jobs/features-and-labels/enterprise-account-executive-manager-namer-0eb65de7-079a-4b9e-8797-914ae811ab64) — San Francisco - [Capital Markets & Compute Strategy](https://zerogtalent.com/ai-jobs/features-and-labels/capital-markets-compute-strategy-8721a2c5-e7c3-42aa-a24e-18de13b09158) — San Francisco - [Business Development Representative (EMEA)](https://zerogtalent.com/ai-jobs/features-and-labels/business-development-representative-emea-219e4c26-f848-4c7d-8590-860a810e12a4) — Turkey - [Account Manager, Commercial (EMEA)](https://zerogtalent.com/ai-jobs/features-and-labels/account-manager-commercial-emea-f1488d67-3e53-4f0c-8803-9c32fc95f309) — Turkey --- *Source: [Zero G Talent](https://zerogtalent.com), the job board for space, defense, AI, robotics and frontier-tech companies.*