[Hiring] Cloud Infrastructure Security Engineer @Runpod

Role Description

As Runpod continues to revolutionize the GPU cloud computing landscape, we are seeking a systems-focused Cloud Infrastructure Security Engineer. This critical position is instrumental in safeguarding our bare-metal and virtualized environments, ensuring the absolute security, multi-tenant isolation, and integrity of our underlying GPU cloud infrastructure.

The ideal candidate possesses deep knowledge of Linux systems, kernel internals, hypervisors, and containerization. You will focus on the lowest levels of our stack—preventing tenant breakouts, securing GPU hardware allocations, and building resilient infrastructure to support AI and machine learning workloads.

Runpod is seeking an innovative security engineer who thrives at the systems layer. You will operate with an Attacker's Mindset, actively hunting for ways to break container and virtualization boundaries, and then writing the low-level code to patch them.

Responsibilities

• Design and implement robust workload and network isolation architectures for RunPod's multitenant GPU bare-metal and virtualized environments.
• Harden Linux kernel configurations, container runtimes (e.g., Docker, containerd), and orchestration layers (e.g., Kubernetes) against breakouts and privilege escalation.
• Conduct deep-dive security assessments and penetration testing specifically targeting our hypervisor, network stack, and hardware interfaces.
• Write code (primarily C, Go, or Rust) to implement custom security controls, telemetry, and fixes at the OS and infrastructure level.
• Evaluate and mitigate security considerations specific to GPU architecture, PCIe pass-through, and shared memory spaces.
• Serve as the technical escalation point for infrastructure-level security incidents, developing forensic capabilities for ephemeral container environments.

Qualifications

• 5+ years of experience in infrastructure or systems-level security engineering.
• Extensive knowledge of Linux kernel internals (cgroups, namespaces, eBPF, SELinux/AppArmor).
• Deep understanding of virtualization technologies (KVM, QEMU) and workload/network isolation techniques in multitenant environments.
• Strong systems-level programming skills in C, Go, Rust, or Python.
• Familiarity with GPU architecture and hardware-level security considerations.
• Experience in securing bare-metal cloud infrastructure and mitigating lower-level CVEs.

Preferred Qualifications

• Contributions to open-source systems security projects or virtualization research.
• Experience writing or deploying eBPF-based security tooling.
• Deep knowledge of low-level networking protocols and virtualized network security.

Benefits

• The competitive base pay for this position ranges from ($152,000 - $175,000).
• Meaningful equity in a fast-growing company—everyone on the team receives stock options.
• Generous medical, dental & vision plans.
• Flexible PTO—take the time you need to recharge.
• Most roles are remote work first with an inclusive, collaborative teams utilizing Slack as the main form of internal communication.
• $1,200 Home Office & Equipment Stipend—gear and support to create your ideal workspace.