Security Engineer, Bare Metal
Fluidstack · New York, NY
About this role
**ABOUT FLUIDSTACK** We exist to make humanity more free. Powerful AI will be the biggest lever for human choice—but only if models are aligned with what humanity actually wants. Whoever deploys frontier compute infrastructure fastest will decide whether AI expands human freedom or shrinks it. Fluidstack is focused on delivering **10 to 100s of GWs of compute faster than anyone else**, rethinking every layer of the stack. We acquire power, design and build data centers, and operate them—bringing together hardware and software teams to build civilization-scale infrastructure for AI. --- **HOW WE OPERATE** - **Be a barrel:** Full autonomy. Own things end to end; take on scope without being asked. - **Insane urgency:** Drive everything forward as fast as possible. - **Reason from first principles:** Challenge assumptions; no ego—best idea wins. - **Love of the game:** Long hours at high intensity to push the frontier. - **Build something that actually matters:** Spend your time on work that impacts the world. --- **THE SECURITY TEAM** Examples of key problems the team is working on: - **Secure the frontier of AI:** Model weights training on our infrastructure are among the most valuable and targeted artifacts in technology. - **Build the entire security program from scratch:** Own it end to end—from **bare metal to boardroom**—as we scale across continents. - **Threat surface measured in gigawatts:** Customers are building the most consequential technology in human history; you’ll be responsible for physical and logical security. --- **ROLE SCOPE** - Own **end-to-end security** for every server in the bare metal fleet—from **supply chain and provisioning** through hardening, operation, and secure decommissioning. - Design and maintain **hardened golden OS images** with automated vulnerability scanning, patch pipelines, and configuration-drift detection. - Define and enforce the **BMC security model** (access control, credential rotation, audit logging, firmware integrity). - Partner with network engineering on **micro-segmentation**, **IDS/IPS**, and firewall architecture—applying **zero-trust** from the top-of-rack up. - Implement **data-at-rest encryption**, key management, and secure storage access at fleet scale; build automation to make **secure-by-default** the path of least resistance. - Lead **threat modeling** and security reviews for new hardware platforms and network designs; respond to incidents affecting the physical fleet. --- **WHAT WE’RE LOOKING FOR** - Experience in information security or infrastructure engineering with a strong focus on **bare metal**, **IaaS**, or **high-scale cloud**. - Deep Linux hardening (e.g., **SELinux**, **AppArmor**, kernel-level security) and command/network security (TCP/IP, VPNs, firewall rulesets, zero-trust). - Practical encryption experience: disk-level (**LUKS**) and hardware-level; understanding of **HSMs** and trusted computing (**TPM/TXT**). - Automation fluency in **Python, Go, or Rust**, plus configuration management (Ansible, Puppet, Chef). - Ability to work across engineering teams and communicate security decisions clearly. - Bonus: **BMC platforms** (OpenBMC, iDRAC, iLO), hardware root of trust and secure boot, compliance standards (SOC 2, ISO 27001, FedRAMP), and/or certifications (CISSP, OSCP, CEH). --- **EQUAL EMPLOYMENT OPPORTUNITY** Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without re
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.