Fal Ai

Senior Infrastructure Security Engineer

San Francisco. Posted 9 days ago

The role

You will secure the fal.ai compute platform by owning security below the application layer. This includes the Linux kernel, hypervisors, sandboxes, GPU drivers, firmware, and hosts.

What you will do

  • Secure Multi-Tenant Isolation
  • Build and maintain the threat model for running code on shared GPU hosts
  • Design and verify GPU memory and device-state scrubbing between tenants
  • Help roll out hardware-backed isolation including confidential computing and attestation
  • Harden kernel builds and host images
  • Reduce attack surface in GPU drivers, CUDA runtimes, NVLink/NVSwitch fabrics, BMC, and firmware
  • Assess and triage security vulnerabilities in the kernel, hypervisors, GPU drivers, and firmware
  • Track vendor bulletins and upstream disclosures and run kernel and driver patching
  • Conduct vulnerability research on the components we depend on
  • Contribute to the host and isolation security roadmap and evaluate tooling

Required qualifications

  • 5+ years in systems or security engineering, with deep hands-on work in the Linux kernel, hypervisors, or device drivers
  • Fluent in kernel C, and comfortable in Rust, Go, or Python for tooling
  • Strong grasp of virtualization internals: KVM, VFIO, IOMMU/DMA protection, and the tradeoffs between containers, sandboxes, and microVMs
  • Has shipped hardening that runs in production at fleet scale
  • Has found, triaged, or fixed real vulnerabilities in low-level code and can explain the exploit path
  • Communicates risk clearly to different audiences, from kernel engineers to executives

Nice to have

  • AI fluency: you use LLMs, agents, and AI coding tools daily to review code, build tooling, and accelerate vulnerability research
  • NVIDIA GPU stack experience: open kernel modules, GSP firmware, MIG, vGPU, or GPU confidential computing
  • Confidential computing more broadly: AMD SEV-SNP, Intel TDX, attestation
  • Published CVEs, talks, or write-ups on kernel or hypervisor security
  • Prior work at a GPU cloud, hyperscaler, or chip vendor

Benefits

  • Interesting and challenging work
  • A lot of learning and growth opportunities
  • Visa sponsorship
  • Relocation help to San Francisco
  • Health, dental, and vision insurance (US)
  • Regular team events and offsites

Before you apply

  • We offer visa sponsorship and will help you relocate to San Francisco

About the company

fal is the generative media ecosystem powering the next generation of AI products. They build the infrastructure, tools, and model access that teams need to move from idea to production at scale.