Cloud Infrastructure Security Engineer (Systems/Kernel)

Responsibilities

• Systems Isolation: Design and implement robust workload and network isolation architectures for RunPod's multitenant GPU bare-metal and virtualized environments.
• Kernel & Container Security: Harden Linux kernel configurations, container runtimes (e.g., Docker, containerd), and orchestration layers (e.g., Kubernetes) against breakouts and privilege escalation.
• Infrastructure Threat Modeling: Conduct deep-dive security assessments and penetration testing specifically targeting our hypervisor, network stack, and hardware interfaces.
• Active Defense: Write code (primarily C, Go, or Rust) to implement custom security controls, telemetry, and fixes at the OS and infrastructure level.
• Hardware Security: Evaluate and mitigate security considerations specific to GPU architecture, PCIe pass-through, and shared memory spaces.
• Incident Response: Serve as the technical escalation point for infrastructure-level security incidents, developing forensic capabilities for ephemeral container environments.

Required Qualifications

• 5+ years of experience in infrastructure or systems-level security engineering.
• Extensive knowledge of Linux kernel internals (cgroups, namespaces, eBPF, SELinux/AppArmor).
• Deep understanding of virtualization technologies (KVM, QEMU) and workload/network isolation techniques in multitenant environments.
• Strong systems-level programming skills in C, Go, Rust, or Python.
• Familiarity with GPU architecture and hardware-level security considerations.
• Experience in securing bare-metal cloud infrastructure and mitigating lower-level CVEs.

Preferred Qualifications

• Contributions to open-source systems security projects or virtualization research.
• Experience writing or deploying eBPF-based security tooling.
• Deep knowledge of low-level networking protocols and virtualized network security.

What You’ll Receive

• The competitive base pay for this position ranges from ($152,000 - $175,000). This salary range may be inclusive of several career levels at Runpod and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location
• Meaningful equity in a fast-growing company- everyone on the team receives stock options - your impact drives our growth, and you share in the upside.
• Generous medical, dental & vision plans
• Flexible PTO- take the time you need to recharge
• Most roles are remote work first with an inclusive, collaborative teams utilizing slack as the main form of internal communication
• Join a passionate team on the cutting edge of AI infrastructure - where culture, learning, and ownership are at the heart of how we scale.
• $1,200 Home Office & Equipment Stipend- We set you up for success from day one with gear and support to create your ideal workspace

Additional information

Runpod is committed to maintaining a workplace free from discrimination and upholding the principles of equality and respect for all individuals. We believe that diversity in all its forms enhances our team. We welcome every qualified candidate eligible to work in the United States; however, we are currently unable to sponsor employment visas.