Note: The job is a remote job and is open to candidates in USA. Zettabyte is building the infrastructure layer for the AI-first world, focusing on secure AI compute at massive scale. They are seeking a Staff Security Engineer to define the security architecture for their high-performance AI compute platform, addressing unique security challenges in a multi-tenant environment.

Responsibilities

• Own the end-to-end security architecture for multi-tenant Kubernetes GPU clusters
• Design tenant isolation, egress control, and network segmentation across compute, storage, and networking layers
• Define and implement runtime security and intrusion detection for untrusted AI workloads
• Build security primitives (identity, secrets, encryption, policy enforcement) that platform teams build on
• Secure the software supply chain, from CI/CD pipelines to container admission
• Lead threat modeling and security design reviews for new platform features
• Drive compliance readiness (SOC 2, ISO 27001) without slowing engineering velocity
• Act as a force multiplier: unblock teams, set standards, and raise the security bar across the org
• Lead security incident response and turn incidents into systemic improvements

Skills

• 7+ years of experience in security engineering for cloud-native, infrastructure, or distributed systems
• Deep, hands-on expertise in Kubernetes security (RBAC, PSA, network policies, admission controllers)
• Strong understanding of cloud security primitives in AWS, GCP, or Azure
• Experience building or operating runtime security and policy enforcement (Falco, Cilium, OPA, Calico, eBPF-based tools)
• Solid grounding in network security and zero-trust architectures
• Practical experience with secrets management and key systems (Vault, cloud KMS)
• Strong automation skills in Go, Python, or Bash
• Proven ability to operate autonomously, make architectural decisions, and deliver in ambiguous environments
• Experience partnering deeply with platform, infra, and SRE teams
• GPU isolation and virtualization security (MIG, SR-IOV)
• InfiniBand, RDMA, or high-performance networking
• HPC or large-scale multi-tenant compute platforms
• Security for AI/ML systems or data-intensive workloads
• Incident response leadership or red team experience
• Security certifications (CKS, OSCP, CISSP)
• Open-source contributions in security or cloud infrastructure

Benefits

• Meaningful equity — be part of the upside as we build a category-defining company. Your grant will align with your role and the experience you bring.

Company Overview

Company H1B Sponsorship