Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 15 hours ago

Senior Infrastructure Security Engineer

fal47 open roles

Pay
$180,000 – $250,000 a year
Where
San Francisco
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Infrastructure Security Engineerfal · San Francisco

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on fal's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.5% of postings close within 7 days. Measured by our own scanner across the market. fal postings stay open a median of 47 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.6%3 days
  3. 13.5%7 days
  4. 21.8%14 days
  5. 36.6%30 days
  6. 58.9%60 days
This job: posted 15 hours ago

fal median: 47 days open

The posting

fal is the generative media ecosystem powering the next generation of AI products. We build the infrastructure, tools, and model access that teams need to move from idea to production, and do it at scale without compromise. For developers and enterprises, fal is the foundation that makes generative media not just possible, but practical: a unified platform where high-performance inference, orchestration, and observability come together to unlock new categories of AI-native products.

As generative media reshapes industries across a market projected to grow by hundreds of billions over the next decade, fal is becoming the ecosystem that ambitious teams build on.

ABOUT THIS ROLE:

We’re hiring a Senior Infrastructure Security Engineer to secure the foundation of fal.ai http://fal.ai’s compute platform. You’ll own security below the application layer: the Linux kernel, the hypervisors and sandboxes that isolate workloads, GPU drivers and firmware, and the hosts that run them. You’ll harden the stack, strengthen isolation against untrusted code, and help make GPU compute safe at scale. Proficiency in building with and using AI is central to this role.

WHAT YOU’LL DO

- Secure Multi-Tenant Isolation

- Build and maintain the threat model for running code on shared GPU hosts, from containers and microVM down to PCIe, IOMMU, and GPU passthrough

- Design and verify GPU memory and device-state scrubbing between tenants

- Help roll out hardware-backed isolation where it fits, including confidential computing and attestation

Harden the Stack

- Harden kernel builds and host images: config minimization, LSMs, seccomp, namespace and cgroup policy, secure and measured boot

- Reduce attack surface in GPU drivers, CUDA runtimes, NVLink/NVSwitch fabrics, BMC, and firmware

Assess and Research Vulnerabilities

- Assess and triage security vulnerabilities in the kernel, hypervisors, GPU drivers, and firmware: judge exploitability and real impact on environment, set severity, and drive fixes or mitigations

- Track vendor bulletins and upstream disclosures, and run kernel and driver patching that keeps pace without disrupting the fleet

- Conduct vulnerability research on the components we depend on

Shape the Program

- Contribute to the host and isolation security roadmap and evaluate tooling

- Partner with Detection & Response on telemetry, and act as the escalation point for host, kernel, and driver incidents

- Review designs from Infra, Platform, and ML teams, and help make the secure path the default

- Work with GPU vendors, cloud providers, and upstream maintainers on disclosure and fixes

QUALIFICATIONS/NICE-TO-HAVES

- AI fluency: you use LLMs, agents, and AI coding tools daily to review code, build tooling, and accelerate vulnerability research

- 5+ years in systems or security engineering, with deep hands-on work in the Linux kernel, hypervisors, or device drivers

- Fluent in kernel C, and comfortable in Rust, Go, or Python for tooling

- Strong grasp of virtualization internals: KVM, VFIO, IOMMU/DMA protection, and the tradeoffs between containers, sandboxes, and microVMs

- Has shipped hardening that runs in production at fleet scale

- Has found, triaged, or fixed real vulnerabilities in low-level code and can explain the exploit path

- Communicates risk clearly to different audiences, from kernel engineers to executives

- NVIDIA GPU stack experience: open kernel modules, GSP firmware, MIG, vGPU, or GPU confidential computing

- Confidential computing more broadly: AMD SEV-SNP, Intel TDX, attestation

- Published CVEs, talks, or write-ups on kernel or hypervisor security

- Prior work at a GPU cloud, hyperscaler, or chip vendor

WHAT WE OFFER AT FAL

- Interesting and challenging work

- A lot of learning and growth opportunities

- We offer visa sponsorship and will help you relocate to San Francisco.

- Health, dental, and vision insurance (US)

- Regular team events and offsites

COMPENSATION

- $180,000 - $250,000 + equity + comprehensive benefits package

U.S. EQUAL EMPLOYMENT OPPORTUNITY INFORMATION:

fal provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against fal's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on fal's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    fal's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.