Information Security Engineer, Bare Metal

FluidStack — New York, New York, United States · In-Person · Senior

Apply for this role

Role description

Role Overview

We're a company focused on delivering 10 to 100s of GWs of compute faster than anyone else, rethinking every layer of the stack. As an Information Security Engineer, you'll own end-to-end security for every server in the bare metal fleet, from supply chain and provisioning through hardening, operation, and secure decommissioning. You'll design and maintain hardened golden OS images, define and enforce the BMC security model, and implement data-at-rest encryption.

What You Will Do

Your day-to-day responsibilities will include owning end-to-end security for every server in the bare metal fleet, designing and maintaining hardened golden OS images, defining and enforcing the BMC security model, and implementing data-at-rest encryption. You'll also lead threat modeling and security reviews for new hardware platforms and network designs, and respond to incidents touching the physical fleet.

Why It Might Be a Fit

We're looking for people who care deeply about the problem space of securing the frontier of AI. If you have a strong focus on bare metal, IaaS, or high-scale cloud infrastructure, and experience with Linux hardening, network security, and encryption, you might be a fit. We value people who can automate fluently in Python, Go, or Rust, and work well across engineering teams.

Requirements

  • Experience with Linux hardening (SELinux, AppArmor, kernel-level security)
  • Command of network security (TCP/IP, VPNs, firewall rulesets, zero-trust)
  • Experience with encryption (disk-level, hardware-level, HSMs, trusted computing)
  • Automation skills in Python, Go, or Rust, with configuration management (Ansible, Puppet, Chef)
  • Ability to work well across engineering teams and communicate security decisions clearly

Benefits

  • Pay equity
  • Transparency
  • Confirmation email once application has successfully been accepted

More jobs at FluidStack

Canonical job page

More roles at FluidStack