[Hiring] Infrastructure Security Engineer @Runway

Role Description

Runway is hiring an Infrastructure Security Engineer to secure the platform our models are trained and served on. The role covers:

• Kubernetes platform security
• Cloud identity and access
• Software supply chain
• Tenant isolation in the serving layer
• The research infrastructure behind our models

This is a hands-on engineering role on the Security team. You'll write policy, tooling, and infrastructure code, work in the platform team's repositories, and ship controls that hold up in production.

What you'll do

• Design and ship security controls in our Kubernetes ecosystem: admission policy, RBAC, workload identity, network policy, and runtime hardening across every cluster we run
• Harden the software supply chain from dependency intake through build and deploy, including package firewalling, artifact signing and provenance, and admission controls that block what doesn't pass
• Own cloud IAM and identity architecture: least-privilege roles, short-lived credentials, and workload federation
• Secure research infrastructure and training pipelines, including access to model weights and datasets, without slowing down the people using them
• Threat model new platform components before they ship and turn the findings into concrete requirements the owning team can act on
• Build guardrails for AI agents and developer tooling operating inside our infrastructure
• Write infrastructure as code and policy as code, and treat security configuration with the same review and rollout discipline as any other change
• Give the incident response team what they need when infrastructure is involved: fast answers about how a system works and what to shut off

Qualifications

• Hands-on experience securing Kubernetes in production
• Working knowledge of cloud IAM and networking on at least one major cloud platform
• Experience with infrastructure as code and GitOps-style deployment
• Comfort writing Python, Typescript, Rust, or another language to build tooling
• An understanding of software supply chain attacks and the controls that stop them
• Clear writing skills for design docs, threat models, and explanations
• Judgment about which controls to enforce and how to roll out changes

Requirements

• Experience securing GPU or HPC-style compute, training pipelines, or research environments
• Experience with policy engines and admission controllers (Kyverno, OPA Gatekeeper, Falco or similar)
• Multi-tenant isolation design in a cloud environment
• Experience producing security architecture evidence for SOC 2, ISO 27001 or other audits
• Open source contributions or published work in cloud or Kubernetes security

Benefits

• Competitive salary based on market rates
• Consideration for candidates with varying levels of experience
• Commitment to pay equity and diverse backgrounds

Company Description

Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed.