{"id":3748968,"url":"https://alion.io/job/runware-senior-security-engineer","title":"Senior Security Engineer","company":{"id":688350,"name":"Runware","domain":"runware.ai","url":"https://alion.io/company/runware","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":95,"open_postings":10,"ghost_share":0,"stale_share":0.2,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US","GB"],"hiring_countries_total":2,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"eBPF","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"VLAN","optional":false},{"name":"InfiniBand","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-11-04T14:33:38Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-06T23:48:21Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About Runware\nRunware is the AI inference platform that builds and runs its own infrastructure, end to end. Our Sonic Inference Engine has served more than 20 billion requests for over 1 million developers and 500 million end users, with 400,000+ models behind a single integration, at up to 10x lower cost per token than traditional providers.\nWe are now building the AI Factory that runs it. The Sonic Inference Pod packs 1 MW of custom-designed compute into a 20-foot container with closed-loop, water-free cooling, sited wherever power exists. Pods are live in the US and Europe, and we are scaling to dozens of pods and tens of thousands of GPUs, all operated as one distributed fabric that reroutes traffic the moment a pod goes offline (announcement).\nEvery one of those pods holds customer models, customer data and millions of dollars of GPUs, sometimes inside a customer's own perimeter or a sovereign jurisdiction. Keeping all of it secure without slowing anyone down is the job.\nThe role\nAs Senior Security Engineer, you will own the security of Runware's AI supercomputer: the bare-metal GPU fleet, the Sonic Inference Pods it lives in, the managed Kubernetes clusters we hand to customers, and the control plane that ties it all together across the US and Europe. You will design the controls, build the first version with your own hands, and set the standard for how security is run across every pod.\nThis is a hands-on senior individual-contributor role. You will threat-model a new pod before it ships, harden the image that every GPU node boots from, prove to an enterprise customer's security team that their model weights never leave their tenant, and when something goes wrong, lead the response and fix the root cause so it never happens again. You will work directly with our CISO, with the inference engine, platform and hardware teams, and with the site teams deploying pods.\nSuccess means a customer workload on a shared pod is isolated as strongly as on a dedicated one, no human has a standing login to a production node, every change to the fleet is reviewed, signed and auditable, and an enterprise security review takes days instead of months.\nWhat you'll do\nOwn the security architecture of the fleet: host hardening for bare-metal GPU nodes, immutable images and a signed build pipeline, boot integrity, and the identity, secrets and access model for humans and services across every pod.\nSecure multi-tenancy on shared infrastructure. Design and verify isolation between customer workloads at the network, Kubernetes, host and GPU layers, and produce the evidence that proves it holds.\nSecure the managed Kubernetes offering: cluster hardening, admission control, RBAC, supply-chain controls for images, and a clean, auditable handover of clusters to customers.\nBuild security visibility across the fleet: logging, detection, alerting and audit trails from firmware to API, wired into the fleet dashboards and on-call so that an anomaly on one node in one pod is seen within minutes.\nLead security reviews and threat models for new pods, sites, servers and platform features, with a focus on real-world risk rather than checklists.\nRun incident response for the infrastructure: investigation, containment, recovery and post-incident learning, as part of the on-call rotation.\nOwn vulnerability management for the fleet: firmware, kernel, drivers, GPU stack and container images across thousands of nodes, with a patch cadence you can defend to a customer.\nAnswer enterprise customers' security due diligence with engineering evidence, and partner with the CISO on the SOC 2 and ISO 27001 controls that touch the infrastructure.\nDesign for sovereign and on-premise deployments: data residency, in-country key management, and physical and remote-access controls for a pod sitting on a customer's site.\nUse AI to accelerate the work: automate evidence collection, log triage, configuration audits and runbooks with LLM-based agents, so that a very small team can secure a very large fleet.\nRequirements\nWhat we're looking for\n8+ years in security or infrastructure engineering, with several of those securing production infrastructure at a company that runs its own hardware at scale.\nA track record of building security controls, not just auditing them. You have taken a hardening standard, an access model or a detection pipeline from design to running across a fleet, and you know what breaks between the two.\nDeep, current, hands-on Linux security expertise: kernel hardening, namespaces and cgroups, seccomp, eBPF, secure and measured boot, TPM-based attestation, and the tooling to see exactly what a process did.\nStrong Kubernetes security: RBAC, admission control and policy engines, network policy, runtime security, image signing and SBOMs, and the ways a container escapes.\nFluent in network security on real hardware: segmentation and VLAN or VXLAN isolation, firewalls, out-of-band management networks, and the risks that live in BMC, IPMI and switch management planes.\nExperience with identity, secrets and PKI at scale: short-lived credentials, workload identity, hardware-backed keys, and removing standing access without slowing engineers down.\nFluent in Python or Go, and comfortable writing the tooling, scanners and automation yourself rather than waiting for someone else to.\nYou use AI to accelerate your own output every day, for scripting, log analysis, code review, documentation and incident triage, and you have a clear view of how a small security team armed with these tools should operate differently.\nA clear communicator who can explain the same trade-off to an engineer, a customer's CISO and a founder in one afternoon, and who assesses risk pragmatically rather than by the book.\nAble to travel to sites in the US and Europe as needed.\nNice to have\nExperience securing GPU clusters for AI training or inference: the NVIDIA driver and fabric manager stack, GPU multi-tenancy (MIG, time-slicing, per-tenant isolation), confidential computing on GPUs, and protecting model weights at rest and in flight.\nFirmware and hardware security: UEFI, BMC and NIC firmware lifecycle, Redfish, hardware root of trust and supply-chain attestation for servers arriving at a site.\nHands-on experience with InfiniBand or RoCE fabrics and the security model of RDMA.\nDelivering SOC 2 or ISO 27001 in a production environment, and compliance tooling and evidence automation.\nOffensive experience: red teaming, penetration testing or vulnerability research against infrastructure.\nExperience with sovereign, air-gapped or regulated deployments, including data residency across jurisdictions.\nPhysical security of data centres or edge sites: access control, tamper evidence and remote-hands procedures.\nBenefits\nWhat we offer\nA rare mandate: secure an AI supercomputer from the firmware up, at a company that owns every layer of its stack and whose enterprise customers are trusting it with their models, with the backing to match.\nMeaningful stock options.\nWe're a remote-first collective, meeting in person twice a year to plan, brainstorm and celebrate wins. We keep core hours for collaboration and calls; outside those, you set your own schedule.\nOur release cycles are fast and intense, and they're followed by real downtime. We expect you to take it.\nGenerous paid time off, including vacation, sick days and public holidays.\nPaid maternity, paternity and caregiver leave.\nTwice-yearly company retreats in inspiring locations.","description_format":"text","description_chars":7477,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Generative Image"],"lifecycle":[{"event":"open","at":"2026-11-04T14:33:38Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":49,"reasons":["conf:4","velocity","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/runware-senior-security-engineer","json_url":"https://alion.io/job/runware-senior-security-engineer.json","meta":{"generated_at":"2026-11-07T03:34:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8656,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":688350},"rest":"https://alion.io/mcp/rest/get_company?id=688350"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frunware-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frunware-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frunware-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/runware-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frunware-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3748968}},{"tool":"search_jobs","arguments":{"company":"runware.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3748968},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}