Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 185 days ago

Infrastructure Security Engineer

Modal43 open roles

Pay
$150,000 – $270,000 a year
Where
New York
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInfrastructure Security EngineerModal · New York

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Modal's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. Modal postings stay open a median of 51 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 185 days ago

Modal median: 51 days open

The posting

ABOUT US: AI NEEDS A NEW INFRASTRUCTURE LAYER. WE'RE BUILDING IT AT MODAL.

Every era of computing brought new workloads that previous infrastructure couldn't support: mainframes, databases, and the cloud. Each time, the company that rebuilt the layer underneath defined the decade. AI is no different, except it touches everything instead of one slice, and the window to build the layer underneath it is open right now.

Our customers include category-defining companies like Ramp https://modal.com/blog/how-ramp-built-a-full-context-background-coding-agent-on-modal, Cognition, DoorDash, and Suno. They rely on Modal for instant GPU access, sub-second container starts, and native storage, so it's simple to serve low-latency inference, fine-tune models, and access production-ready sandboxes at scale.

We've passed $1B in annualized run rate, up 15x from a year ago. In October 2026 we raised a $750M Series D led by Accel at a $15.75B valuation.

Our team includes creators of popular open-source projects (e.g.,Seaborn https://github.com/mwaskom/seaborn,Luigi https://github.com/spotify/luigi), academic researchers, international olympiad medalists, and experienced engineering and product leaders with decades of experience.

THE ROLE:

We’re looking for an Infrastructure Security Engineer to design and secure the core systems that power our platform. This role focuses on building security directly into our infrastructure: from container isolation and orchestration to identity and secrets management in a multi-tenant, cloud-native environment.

You’ll work closely with engineering teams to define secure primitives and ensure our platform is resilient, scalable, and trustworthy by design.

This is a hands-on, deeply technical role focused on real systems, not compliance or policy.

WHAT YOU’LL WORK ON:

Platform & Runtime Security

- Design and improve isolation mechanisms for multi-tenant workloads (containers, sandboxing, execution environments)

- Strengthen boundaries between customers, workloads, and internal systems

- Identify and mitigate risks in distributed, dynamic compute environments

Container & Orchestration Security

- Secure and harden containerized workloads and orchestration systems (e.g., Kubernetes or similar)

- Improve workload isolation, scheduling boundaries, and runtime protections

- Evaluate tradeoffs in multi-tenant execution models

Identity & Access Management

- Design and improve authentication and authorization systems across services

- Implement strong service-to-service identity and least-privilege access patterns

- Improve access controls across infrastructure and internal systems

Secrets & Key Management

- Build and maintain systems for securely managing secrets, tokens, and credentials

- Improve rotation, auditing, and access controls

- Reduce secret sprawl and integrate secure patterns into developer workflows

Cloud & Infrastructure Security

- Secure cloud environments across providers (AWS, GCP, etc.) with a focus on consistency and portability

- Improve network boundaries, service segmentation, and access controls

- Embed security into infrastructure-as-code and deployment systems

Engineering Partnership

- Work closely with product and infrastructure teams to design secure systems from the ground up

- Review architecture and code for security risks and provide actionable guidance

- Identify patterns in risks and drive cross-cutting improvements

YOU MAY BE A FIT IF:

Core Experience

- You have experience securing cloud-native infrastructure and distributed systems in production

- You have a background in infrastructure, backend, or security engineering

- You’ve worked in multi-tenant or high-scale environments

Technical Depth

- You have a strong understanding of containerization and orchestration systems (e.g., Kubernetes or similar)

- You’ve designed or secured isolation mechanisms in multi-tenant systems

- You have a solid understanding of authentication, authorization, and service identity models

- You have experience with secrets management and secure handling of credentials

- You have a strong foundation in networking concepts (segmentation, service communication, access boundaries)

Mindset

- You have a builder mentality: you design and implement, not just review

- You take a pragmatic approach to security in fast-moving environments

- You’re comfortable working deeply with engineers and influencing system design

NICE-TO-HAVE:

- Experience with sandboxing or runtime isolation technologies (e.g., gVisor, Firecracker, seccomp, or similar)

- Familiarity with kernel-level or low-level isolation primitives

- Experience securing Kubernetes or similar orchestration systems in production

- Background in developer infrastructure, compute platforms, or multi-tenant systems

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Modal's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Modal's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Modal's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.