Staff Product Security Engineer

The role

This person will perform advanced penetration testing and lead offensive security initiatives. They will secure AI/ML systems, including LLM pipelines and RAG architectures, while building internal security guardrails.

What you will do

• Performing advanced manual penetration testing across applications, infrastructure, Kubernetes, and microservices
• Leading offensive security initiatives including red team operations and adversary simulation
• Securing AI/ML systems including LLM pipelines, vector databases, RAG architectures, and agentic workflows
• Identifying and researching novel attack surfaces unique to LLMs and autonomous systems
• Influencing secure system design across the SDLC and embedding security into CI/CD pipelines
• Integrating and operationalizing security tooling and driving remediation of vulnerabilities
• Building internal security guardrails such as hardened base images and policy-as-code frameworks
• Developing production-grade security tooling and leading cross-functional security programs

Required qualifications

• 8-10 years of deep hands-on experience in offensive security, including manual penetration testing, red team operations, and adversary simulation
• Familiarity with modern C2 frameworks (e.g., Cobalt Strike, Sliver, Havoc), exploit development, and security research
• Strong expertise across the AI/ML stack, including MLOps, inference architectures, vector databases, RAG, and agentic frameworks
• Experience building, deploying, and securing LLM pipelines and AI workflows in Kubernetes and/or bare-metal environments
• Strong software engineering foundations with experience shipping production code in Go, Python, or Rust
• Hands-on experience securing Kubernetes, containers, VMs, and CI/CD environments
• Deep understanding of application security vulnerabilities, secure coding practices, and distributed system design
• Demonstrated ability to lead complex, cross-functional security initiatives end-to-end
• Strong communication skills with the ability to influence both engineering teams and executive stakeholders

Nice to have

• Public contributions to offensive security or AI security research (talks, blogs, tooling, CVEs, etc.)
• Experience building internal red team or adversary simulation programs
• Background in high-performance computing, AI infrastructure, or cloud-native platform security
• Experience designing policy-as-code frameworks at scale

Benefits

• Competitive compensation
• Restricted Stock Units
• Paid time off & paid holidays
• Comprehensive health, dental & vision insurance
• Employer contributions to HSA account
• Paid parental leave
• Paid life insurance, short-term and long-term disability
• Professional development & tuition reimbursement
• Mental health & wellness support
• Commuter benefits (parking & transit)
• Cell phone stipend
• 401(k) Retirement plan with company match up to 4% of salary

About the company

Crusoe is a vertically integrated AI infrastructure company that owns and operates each layer of the stack to power AI workloads. They use an energy-first approach to solve power bottlenecks for AI compute.