Senior/Staff Security Engineer

About Zettabyte At Zettabyte, we’re building the infrastructure layer for the AI-first world. Our mission is to make AI compute ubiquitous, seamless, and limitless by operating a cloud where AI workloads run securely at massive scale—anywhere, anytime. We run a multi-tenant GPU cloud for AI developers and enterprises. Security isn’t a support function here—it’s a core platform capability. Why this role exists Zettabyte is scaling a shared, high-performance AI compute platform in a space where traditional cloud security models break down. Multi-tenant GPUs, high-speed networking, and untrusted customer workloads introduce security challenges that don’t have off-the-shelf answers. We’re hiring a Staff Security Engineer to define and own the security architecture of our platform. You’ll operate with wide latitude, shaping how isolation, detection, and trust are built into the system from day one. This role is ideal for someone who thrives in early-to-mid stage environments, enjoys working through ambiguity, and wants to build security systems that scale with the business—not slow it down. What you’ll do Own the end-to-end security architecture for multi-tenant Kubernetes GPU clustersDesign tenant isolation, egress control, and network segmentation across compute, storage, and networking layersDefine and implement runtime security and intrusion detection for untrusted AI workloadsBuild security primitives (identity, secrets, encryption, policy enforcement) that platform teams build onSecure the software supply chain, from CI/CD pipelines to container admissionLead threat modeling and security design reviews for new platform featuresDrive compliance readiness (SOC 2, ISO 27001) without slowing engineering velocityAct as a force multiplier: unblock teams, set standards, and raise the security bar across the orgLead security incident response and turn incidents into systemic improvements What we’re looking for 7+ years of experience in security engineering for cloud-native, infrastructure, or distributed systemsDeep, hands-on expertise in Kubernetes security (RBAC, PSA, network policies, admission controllers)Strong understanding of cloud security primitives in AWS, GCP, or AzureExperience building or operating runtime security and policy enforcement (Falco, Cilium, OPA, Calico, eBPF-based tools)Solid grounding in network security and zero-trust architecturesPractical experience with secrets management and key systems (Vault, cloud KMS)Strong automation skills in Go, Python, or BashProven ability to operate autonomously, make architectural decisions, and deliver in ambiguous environmentsExperience partnering deeply with platform, infra, and SRE teams Bonus Experience (nice To Have, Not Required) GPU isolation and virtualization security (MIG, SR-IOV)InfiniBand, RDMA, or high-performance networkingHPC or large-scale multi-tenant compute platformsSecurity for AI/ML systems or data-intensive workloadsIncident response leadership or red team experienceSecurity certifications (CKS, OSCP, CISSP)Open-source contributions in security or cloud infrastructure What makes this role different You’ll define the security model, not just implement ticketsYou’ll work on real isolation problems in GPU and high-speed networking environmentsYou’ll influence architecture across the platform, not sit in a siloYou’ll help build a security culture at a company where speed and safety both matter Compensation Competitive salary — commensurate with your experience and aligned with industry standardsMeaningful equity — be part of the upside as we build a category-defining company. Your grant will align with your role and the experience you bring.