[Hiring] Member of Technical Staff, Product Security @Inferact

Role Description

We're looking for a Member of Technical Staff, Product Security to secure the Inferact product as it moves from early deployments to production use by enterprise customers. Customers trust Inferact with their models, prompts, and production traffic. You'll own the security of the systems that serve them:

• The inference platform and its APIs
• The control plane
• The cloud and Kubernetes infrastructure underneath
• The way we build and ship software

This is a hands-on engineering role. You'll:

• Threat-model new features with the engineers who build them
• Review and write code
• Find and fix vulnerabilities
• Build secure defaults, tooling, and guardrails that let a small team move fast without adding risk

You'll work closely with:

• The inference team
• The infrastructure team
• The product team
• The forward-deployed engineering teams
• The engineer who owns vLLM vulnerability management when an upstream issue affects our product

You'll set the direction for product security at Inferact and carry the work from design review to shipped fix.

Qualifications

• Hands-on product or application security experience on software that customers run or depend on, with a record of finding, fixing, and preventing real vulnerabilities, not only running scanners or tracking compliance
• Strong software engineering ability: you read and write production code, review pull requests, and can ship a fix and the test that proves it
• Experience threat-modeling and reviewing the design of distributed systems, APIs, and services, including authentication, authorization, multi-tenancy, data isolation, and secrets handling
• Working knowledge of cloud and container security: IAM, network boundaries, Kubernetes, and infrastructure as code
• Sound risk judgment: you can separate a real, reachable risk from a theoretical one and choose controls that fit the stage of the company
• Clear written and verbal communication with engineers, leadership, and customers' security teams, and discretion with sensitive information

Requirements

• Experience securing AI / ML infrastructure, model serving, GPU workloads, or developer platforms
• Experience securing software supply chains and CI/CD: dependency risk, build integrity, artifact signing, and container image hardening
• Familiarity with security risks specific to inference systems, such as untrusted model loading, tenant isolation on shared hardware, and handling of prompts and outputs
• Experience building security tooling, paved roads, or secure-by-default libraries that engineers adopt
• Experience answering the technical part of enterprise customer security reviews and supporting customer deployments in their own cloud environments

Benefits

• Generous health, dental, and vision benefits
• 401(k) company match

Company Description

Inferact's mission is to grow vLLM as the world's AI inference engine and accelerate AI progress by making inference cheaper and faster. Founded by the creators and core maintainers of vLLM, we sit at the intersection of models and hardware, a position that took years to build.