{"id":3852136,"url":"https://alion.io/job/fal-senior-infrastructure-security-engineer","title":"Senior Infrastructure Security Engineer","company":{"id":44380,"name":"Fal","domain":"fal.ai","url":"https://alion.io/company/fal","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":88,"open_postings":19,"ghost_share":0,"stale_share":0.474,"repost_share":0,"time_to_fill_p50_days":46,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":true,"has_equity":false,"technologies":[{"name":"CUDA","optional":false},{"name":"Linux","optional":false},{"name":"NVLink","optional":false},{"name":"KVM","optional":true},{"name":"Python","optional":true},{"name":"Rust","optional":true}],"status":"live","first_seen_at":"2026-11-06T00:46:02Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T14:34:27Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high-performance inference, orchestration, and observability come together to unlock new categories of AI-native products.\nAs generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on.\nAbout this role:\nWe’re hiring a Senior Infrastructure Security Engineer to secure the foundation of fal.ai ’s compute platform. You’ll own security below the application layer: the Linux kernel, the hypervisors and sandboxes that isolate workloads, GPU drivers and firmware, and the hosts that run them. You’ll harden the stack, strengthen isolation against untrusted code, and help make GPU compute safe at scale. Proficiency in building with and using AI is central to this role.\nWhat you’ll do\nSecure Multi-Tenant Isolation\nBuild and maintain the threat model for running code on shared GPU hosts, from containers and microVM down to PCIe, IOMMU, and GPU passthrough\n\nDesign and verify GPU memory and device-state scrubbing between tenants\n\nHelp roll out hardware-backed isolation where it fits, including confidential computing and attestation\n\nHarden the Stack\nHarden kernel builds and host images: config minimization, LSMs, seccomp, namespace and cgroup policy, secure and measured boot\n\nReduce attack surface in GPU drivers, CUDA runtimes, NVLink/NVSwitch fabrics, BMC, and firmware\n\nAssess and Research Vulnerabilities\nAssess and triage security vulnerabilities in the kernel, hypervisors, GPU drivers, and firmware: judge exploitability and real impact on environment, set severity, and drive fixes or mitigations\n\nTrack vendor bulletins and upstream disclosures, and run kernel and driver patching that keeps pace without disrupting the fleet\n\nConduct vulnerability research on the components we depend on\n\nShape the Program\nContribute to the host and isolation security roadmap and evaluate tooling\n\nPartner with Detection & Response on telemetry, and act as the escalation point for host, kernel, and driver incidents\n\nReview designs from Infra, Platform, and ML teams, and help make the secure path the default\n\nWork with GPU vendors, cloud providers, and upstream maintainers on disclosure and fixes\n\nQualifications/Nice-to-haves\nAI fluency: you use LLMs, agents, and AI coding tools daily to review code, build tooling, and accelerate vulnerability research\n\n5+ years in systems or security engineering, with deep hands-on work in the Linux kernel, hypervisors, or device drivers\n\nFluent in kernel C, and comfortable in Rust, Go, or Python for tooling\n\nStrong grasp of virtualization internals: KVM, VFIO, IOMMU/DMA protection, and the tradeoffs between containers, sandboxes, and microVMs\n\nHas shipped hardening that runs in production at fleet scale\n\nHas found, triaged, or fixed real vulnerabilities in low-level code and can explain the exploit path\n\nCommunicates risk clearly to different audiences, from kernel engineers to executives\n\nNVIDIA GPU stack experience: open kernel modules, GSP firmware, MIG, vGPU, or GPU confidential computing\n\nConfidential computing more broadly: AMD SEV-SNP, Intel TDX, attestation\n\nPublished CVEs, talks, or write-ups on kernel or hypervisor security\n\nPrior work at a GPU cloud, hyperscaler, or chip vendor\n\nWhat we offer at fal\nInteresting and challenging work\n\nA lot of learning and growth opportunities\n\nWe offer visa sponsorship and will help you relocate to San Francisco.\n\nHealth, dental, and vision insurance (US)\n\nRegular team events and offsites\n\nCompensation\n$180,000 - $250,000 + equity + comprehensive benefits package\n\nU.S. EQUAL EMPLOYMENT OPPORTUNITY INFORMATION:\nfal provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law.","description_format":"text","description_chars":4270,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Growth opportunities","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Generative Image","Generative Video","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-11-06T04:01:33Z"}],"visa":[{"country":"US","licensed_sponsor":false,"adverts_offering_sponsorship_24m":22,"sanctioned_now":false,"evidence":"Offered visa sponsorship in 22 of its adverts here in 24 months","filings_12m":0,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["Alion: sponsorship offered in the employer's own job adverts (24 months)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":46,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":true},"html_url":"https://alion.io/job/fal-senior-infrastructure-security-engineer","json_url":"https://alion.io/job/fal-senior-infrastructure-security-engineer.json","meta":{"generated_at":"2026-11-07T15:26:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20911,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":44380},"rest":"https://alion.io/mcp/rest/get_company?id=44380"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffal-senior-infrastructure-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffal-senior-infrastructure-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffal-senior-infrastructure-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fal-senior-infrastructure-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffal-senior-infrastructure-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3852136}},{"tool":"search_jobs","arguments":{"company":"fal.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3852136},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}