Information Security Engineer, Bare Metal
FluidStack — New York, New York, United States · In-Person · Senior
Role description
Role Overview
We're a company focused on delivering 10 to 100s of GWs of compute faster than anyone else, rethinking every layer of the stack. As an Information Security Engineer, you'll own end-to-end security for every server in the bare metal fleet, from supply chain and provisioning through hardening, operation, and secure decommissioning. You'll design and maintain hardened golden OS images, define and enforce the BMC security model, and implement data-at-rest encryption.
What You Will Do
Your day-to-day responsibilities will include owning end-to-end security for every server in the bare metal fleet, designing and maintaining hardened golden OS images, defining and enforcing the BMC security model, and implementing data-at-rest encryption. You'll also lead threat modeling and security reviews for new hardware platforms and network designs, and respond to incidents touching the physical fleet.
Why It Might Be a Fit
We're looking for people who care deeply about the problem space of securing the frontier of AI. If you have a strong focus on bare metal, IaaS, or high-scale cloud infrastructure, and experience with Linux hardening, network security, and encryption, you might be a fit. We value people who can automate fluently in Python, Go, or Rust, and work well across engineering teams.
Requirements
- Experience with Linux hardening (SELinux, AppArmor, kernel-level security)
- Command of network security (TCP/IP, VPNs, firewall rulesets, zero-trust)
- Experience with encryption (disk-level, hardware-level, HSMs, trusted computing)
- Automation skills in Python, Go, or Rust, with configuration management (Ansible, Puppet, Chef)
- Ability to work well across engineering teams and communicate security decisions clearly
Benefits
- Pay equity
- Transparency
- Confirmation email once application has successfully been accepted