Cloud Infrastructure Security Engineer (Systems/Kernel)

About the role

Runpod is seeking a systems‑focused Cloud Infrastructure Security Engineer to protect its bare‑metal and virtualized GPU cloud environments. You will work at the lowest layers of the stack, preventing tenant breakouts and securing hardware allocations.

Key responsibilities

• Design and implement robust workload and network isolation for multitenant GPU bare‑metal and virtualized environments.
• Harden Linux kernel configurations, container runtimes (Docker, containerd) and orchestration layers (Kubernetes) against breakouts and privilege escalation.
• Conduct deep‑dive security assessments and penetration testing of hypervisors, network stacks, and hardware interfaces.
• Write low‑level code (C, Go, Rust) to add custom security controls, telemetry, and patches.
• Evaluate and mitigate security considerations specific to GPU architecture, PCIe pass‑through, and shared memory spaces.
• Serve as technical escalation point for infrastructure‑level security incidents and develop forensic capabilities.

Required profile

• 5+ years of experience in infrastructure or systems‑level security engineering.
• Extensive knowledge of Linux kernel internals (cgroups, namespaces, eBPF, SELinux/AppArmor).
• Deep understanding of virtualization technologies (KVM, QEMU) and multitenant isolation techniques.
• Strong systems‑level programming skills in C, Go, Rust, or Python.
• Familiarity with GPU architecture and hardware‑level security considerations.

Required skills

• Linux kernel hardening
• Container security (Docker, containerd, Kubernetes)
• Virtualization (KVM, QEMU)
• Systems programming (C, Go, Rust, Python)
• eBPF, SELinux/AppArmor
• GPU hardware security, PCIe pass‑through

What we offer

• Competitive base salary $152,000‑$175,000 USD per year.
• Meaningful equity with stock options.
• Generous medical, dental, and vision plans.
• Flexible PTO and remote‑first work environment.
• $1,200 home office and equipment stipend.