Security Engineer, Offensive Security
Fluidstack · San Francisco, CA
About this role
**ABOUT FLUIDSTACK** Fluidstack exists to make humanity more free. We’re building civilization-scale AI infrastructure—acquiring power, designing and operating data centers, and delivering **10 to 100s of GW of compute faster** than anyone else. **HOW WE OPERATE** - **Be a barrel:** Full autonomy. Own things end to end. - **Insane urgency:** Move fast and push forward. - **Reason from first principles:** Challenge assumptions; best idea wins. - **Love of the game:** High-intensity work to push the frontier. - **Build something that matters:** Spend your time on world-impacting problems. --- **THE SECURITY TEAM** You’ll help secure the frontier of AI. The model weights training on our infrastructure are among the most valuable and targeted artifacts in technology—so a breach isn’t a leak, it’s the frontier walking out the door. **ROLE SCOPE** - Run **red and purple team** operations across networks, data center OT, and applications—extending the offensive program. - **Pen test** networks behind GPU clusters (frontend/backend fabrics, out-of-band management, site connectivity), focusing on **segmentation** and **tenant isolation**. - Test **data center OT** (building management, power monitoring, cooling controls, IT/OT boundary) in partnership with site operations to avoid risk to live sites. - Break the **customer-facing platform** (console, public APIs, identity & access controls), hunting for paths from one tenant to another. - Assess internal/engineer-built apps and **CI/CD pipelines**, turning recurring findings into secure defaults. - Partner on **AI-specific attack scenarios** (agentic systems and novel AI-enabled risks) and contribute to AI-assisted offensive testing tools/workflows. - Present findings to **technical and executive** audiences with clear, actionable risk that shapes the security roadmap. --- **WHAT WE’RE LOOKING FOR** - Years of hands-on experience in **red teaming** and offensive security operations. - Deep expertise in at least **two** of: enterprise/data center networks, **OT/ICS**, web & API apps, cloud (AWS/GCP/Azure), Kubernetes, **CI/CD**. - Ability to find novel attack paths and chain vulnerabilities into full compromise across network/app/identity boundaries. - Experience running red team operations and adversary simulations against well-defended environments. - Hands-on testing experience finding **authentication/authorization** and **multi-tenant** flaws in web apps and APIs. - Strong coding ability in **Python, Go,** or similar; build tooling when needed. - Experience using **AI/LLMs/agents** in real offensive engagements (recon, vuln discovery, exploit dev, attack-path analysis). - Findings that get fixed; close collaboration with blue teams to drive detections and hardening. **Bonus** - State-nexus threat models (frontier AI, government, critical infrastructure). - Data center facility systems (BMS/EPMS, cooling controls, Modbus, BACnet). - High-performance/data center networking (InfiniBand, RoCE, BGP, out-of-band management). - Testing AI/ML systems (agentic workflows, model serving). - Defensive experience (detection engineering, SIEM, EDR). --- **EQUAL OPPORTUNITY** Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration without regard to protected characteristics. **APPLY** https://jobs.ashbyhq.com/fluidstack/05c2e69c-42f9-4fcb-9cf0-a467aaf98f1c
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.