Note: The job is a remote job and is open to candidates in USA. Brain Co. builds AI-native operating systems for large, regulated institutions. As an AI Infrastructure Security Engineer, you will secure the platform layer end-to-end, including cloud infrastructure and Kubernetes, while partnering closely with the infra team to build secure-by-default infrastructure.
Responsibilities
- Build the security foundations of our AI platform: identity, isolation, secrets management, and access control across cloud and Kubernetes environments
- Harden infrastructure end-to-end from cloud networking and service meshes to CI/CD pipelines and the data and model pipelines powering Brain Co's AI capabilities work
- Implement Zero Trust principles and machine identity across workloads; short-lived credentials, least-privilege access, and encrypted service communication
- Protect customer data and the agent workloads running on our platform. Design secure execution environments and data access pathways for code and actions taken by agents on our systems
- Build security guardrails directly into infrastructure and deployment workflows using Infrastructure-as-Code (Terraform) so security scales with the platform
- Own threat modeling across infrastructure layers—identifying and remediating risks before they become incidents
- Own security for Brain Co's forward-deployed infrastructure — designing and hardening bespoke VPCs and customer-environment deployments where every engagement brings its own unique attack surface
- Partner with platform, infra, product, and ML teams to ship code and infrastructure together as a true partner so engineers move fast with secure-by-default systems
Skills
- 5+ years of experience in security engineering, infrastructure, or SRE with hands-on experience building or securing production systems at scale
- Fluent in cloud security fundamentals (IAM, networking, KMS, secrets, isolation) across AWS, GCP, or Azure
- Designed and implemented secure systems end-to-end not just reviewed them after the fact
- Hands-on experience with Kubernetes, container security, and Linux systems
- Think in terms of threat models, trust boundaries, and failure modes and can translate that into concrete controls
- Enjoy building paved roads and guardrails using Infrastructure-as-Code (Terraform preferred) so the whole team moves faster safely
- Experience with authentication and authorization systems, secrets management, and cryptography basics
- Hands-on builder who is energized by writing code, shipping infrastructure, and partnering directly with infra and platform engineers rather than advising from the sidelines
- Thrive in ambiguous, high-agency environments and want ownership of the infrastructure security function as it grows
- Experience with ML systems or multi-tenant platform isolation
- Familiarity with service mesh and zero-trust architectures
- Proficiency in Go, Python, or a similar language for automation and tooling
Benefits
- Competitive salary plus equity
- Daily lunches
- Commuter benefits
- 401(k)
- Medical, Dental, and Vision
- Unlimited PTO
Company Overview
Company H1B Sponsorship