Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Member of Technical Staff, Product Security role.
Rezi rewrites your resume against Inferact's job description. Free.
Tailor your resume to this Member of Technical Staff, Product Security role.
Rezi rewrites your resume against Inferact's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Member of Technical Staff, Product Security posting at Inferact — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Member of Technical Staff, Product Security posting at Inferact — free, in seconds.
About the Role
We're looking for a Member of Technical Staff, Product Security to secure the Inferact product as it moves from early deployments to production use by enterprise customers. You'll own the security of the systems that serve them: the inference platform and its APIs, the control plane, the cloud and Kubernetes infrastructure underneath, and the way we build and ship software. This is a hands-on engineering role where you'll threat-model new features, review and write code, find and fix vulnerabilities, and build secure defaults, tooling, and guardrails. You'll set the direction for product security at Inferact and carry the work from design review to shipped fix.
Responsibilities
- Threat-model new features with engineers.
- Review and write code.
- Find and fix vulnerabilities.
- Build secure defaults, tooling, and guardrails.
- Work closely with inference, infrastructure, product, and forward-deployed engineering teams.
- Collaborate with the engineer who owns vLLM vulnerability management.
- Set the direction for product security at Inferact.
- Carry security work from design review to shipped fix.
Requirements
- Hands-on product or application security experience on software that customers run or depend on.
- Record of finding, fixing, and preventing real vulnerabilities.
- Strong software engineering ability: read and write production code, review pull requests, and ship fixes with tests.
- Experience threat-modeling and reviewing the design of distributed systems, APIs, and services.
- Experience with authentication, authorization, multi-tenancy, data isolation, and secrets handling.
- Working knowledge of cloud and container security: IAM, network boundaries, Kubernetes, and infrastructure as code.
- Sound risk judgment: ability to separate real, reachable risks from theoretical ones and choose appropriate controls.
- Clear written and verbal communication with engineers, leadership, and customers' security teams.
- Discretion with sensitive information.
Skills
- Product security
- Application security
- Software engineering
- Threat modeling
- Distributed systems design
- API security
- Service security
- Authentication
- Authorization
- Multi-tenancy
- Data isolation
- Secrets handling
- Cloud security
- Container security
- IAM
- Network security
- Kubernetes
- Infrastructure as code
- Risk assessment
- Communication
- AI/ML infrastructure security
- Model serving security
- GPU workload security
- Developer platform security
- Software supply chain security
- CI/CD security
- Dependency risk management
- Build integrity
- Artifact signing
- Container image hardening
- Inference system security
- Untrusted model loading
- Tenant isolation
- Prompt and output handling
- Security tooling development
- Paved roads implementation
- Secure-by-default library development
- Enterprise customer security reviews
- Customer deployment support
- Open-source security contributions
- Product security function development
- Offensive security
- Security research
- vLLM contributions
- PyTorch contributions
- ML infrastructure contributions
Location
- San Francisco, California
- Remote in the US
Work Type
- Full-time
Experience Level
- Member of Technical Staff
Salary/Compensations
- $200,000 - $400,000 USD + equity
Benefits
- Generous health, dental, and vision benefits
- 401(k) company match
About the Company
- Inferact's mission is to grow vLLM as the world's AI inference engine and accelerate AI progress by making inference cheaper and faster.
- Founded by the creators and core maintainers of vLLM, we sit at the intersection of models and hardware, a position that took years to build.
Equal Opportunity
- Inferact, Inc. is an E-Verify company.
- Notice of E-Verify Participation
- Right to Work posters in English and Spanish.