{"id":117876,"url":"https://alion.io/job/fal-staff-security-engineer-infrastructure","title":"Staff Security Engineer, Infrastructure","company":{"id":44380,"name":"Fal","domain":"fal.ai","url":"https://alion.io/company/fal","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":87,"open_postings":22,"ghost_share":0,"stale_share":0.318,"repost_share":0,"time_to_fill_p50_days":65,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Pulumi","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Vault","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Docker","optional":true},{"name":"GCP","optional":true},{"name":"Linux","optional":true},{"name":"Python","optional":true},{"name":"Service Mesh","optional":true}],"status":"live","first_seen_at":"2026-04-06T23:01:05Z","employer_posted_date":"2026-04-06","last_verified_at":"2026-10-17T11:17:53Z","board_verified":true,"closed_at":null,"days_open":193,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":193},"description":"fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high-performance inference, orchestration, and observability come together to unlock new categories of AI-native products.\nAs generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on.\nAbout the Role\nWe’re looking for a Security Engineer, Infrastructure to secure the core systems that power fal.ai’s platform: GPU compute, multi-cloud environments, networking, and data pipelines. You’ll operate across the full stack, from cloud and Kubernetes to identity, networking, and secrets, designing and implementing security controls that scale with a high-performance AI platform. This role is highly hands-on and systems-oriented, sitting at the intersection of security, infrastructure, and distributed systems.\nWhat You’ll Do\nBuild & Harden Infrastructure Security\nDesign and implement security controls across:\nCloud infrastructure\n\nKubernetes and containerized workloads\n\nNetworking, service meshes, and edge systems\n\nCI/CD pipelines and deployment systems\n\nSecure compute environments for GPU workloads and model execution\n\nIdentity, Secrets & Access\nMachine identity and workload authentication\n\nSecrets management and encryption (e.g., Vault, KMS)\n\nLeast-privilege access and short-lived credentials\n\nImplement Zero Trust principles across infrastructure\n\nSecure AI & Data Systems\nProtect model weights, inference endpoints, and customer data\n\nDesign secure data access pathways and isolation mechanisms\n\nEnsure safe multi-tenant execution environments\n\nAutomation & Security Tooling\nBuild security guardrails directly into infrastructure and CI/CD\n\nUse Infrastructure-as-Code (Terraform, Pulumi) to enforce secure defaults\n\nContinuously identify and remediate security gaps through automation\n\nThreat Modeling & Risk Reduction\nIdentify and mitigate risks across infrastructure layers\n\nDefend against both external attackers and insider threats\n\nDrive projects like network isolation, encryption, and secure service communication\n\nCross-Functional Collaboration\nPartner with platform, infra, and ML teams to drive shift-left security\n\nEnable engineers to move fast with secure-by-default systems\n\nContribute to a strong security culture across the company\n\nQualifications/Nice to have:\nCore Requirements\n8+ years in security engineering, infrastructure, or SRE\n\nStrong understanding of:\nCloud security (AWS, GCP, or Azure)\n\nNetworking fundamentals (segmentation, firewalls, Zero Trust)\n\nLinux systems and container security (Docker, Kubernetes)\n\nExperience building or securing production infrastructure at scale\n\nSecurity Expertise\nDeep knowledge of:\nAuthentication & authorization systems\n\nSecrets management and cryptography basics\n\nCommon vulnerabilities and attack vectors\n\nAbility to design security controls across multiple layers (infra → app)\n\nEngineering Skills\nProficiency in at least one language (Go, Python, or similar)\n\nExperience with Infrastructure-as-Code (Terraform preferred)\n\nStrong automation mindset-security should scale with systems\n\nExperience with:\nGPU infrastructure or ML systems\n\nMulti-tenant platform isolation\n\nService mesh / zero-trust architectures\n\nHigh-growth startup environments\n\n What we offer at fal\nInteresting and challenging work\n\nA lot of learning and growth opportunities\n\nWe offer visa sponsorship and will help you relocate to San Francisco.\n\nHealth, dental, and vision insurance (US)\n\nRegular team events and offsites\n\nCompensation\n$180,000 - $250,000 + equity + comprehensive benefits package\n\nU.S. EQUAL EMPLOYMENT OPPORTUNITY INFORMATION:\nfal provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law.","description_format":"text","description_chars":4244,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Growth opportunities","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Generative Image","Generative Video","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-04-06T23:01:05Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.544,"p_room":0.28,"age_days":193,"expected_fill_days":65,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":true},"html_url":"https://alion.io/job/fal-staff-security-engineer-infrastructure","json_url":"https://alion.io/job/fal-staff-security-engineer-infrastructure.json","meta":{"generated_at":"2026-10-17T11:44:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15425,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":44380},"rest":"https://alion.io/mcp/rest/get_company?id=44380"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffal-staff-security-engineer-infrastructure"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffal-staff-security-engineer-infrastructure"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffal-staff-security-engineer-infrastructure"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fal-staff-security-engineer-infrastructure\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffal-staff-security-engineer-infrastructure"}]}