Software Engineer – Platform Security
- Level
- Mid
- Work type
- Hybrid · San Francisco
Not stated in the posting: salary, visa.
Open. First seen 21 October 2026.
About the role
About the job
FriendliAI is looking for an engineer to architect and build the security foundations of a multi-tenant serverless compute platform running on Kubernetes with hardened container isolation. As a Software Engineer, Platform Security, you will own the security design for both the control plane and data plane, implement guardrails as code, and partner closely with Platform/SRE/Infra teams to ship a secure-by-default developer experience. This is a hands-on builder and architect role.
Key Responsibilities
- Design and implement the security architecture for a Kubernetes-based, multi-tenant serverless platform.
- Build guardrails as code using Terraform and Helm.
- Establish network segmentation and service-mesh policy.
- Develop secrets and key management patterns.
- Implement runtime detections for containerized workloads.
- Design and roll out IAM & workload identity management.
- Threat model new features and changes to the overall platform.
- Collaborate with engineering to debug production issues, lead post-incident hardening, and automate evidence for compliance controls.
Qualifications
- 5+ years securing cloud-native platforms with a focus on distributed systems and multi-tenancy.
- Bachelor’s or Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent.
- Strong hands-on experience with AWS (IAM, VPC/networking, logging/monitoring, …) and Kubernetes/container security.
- Proficiency with Terraform and Helm.
- Experience building or operating runtime detections for containers/functions.
- Strong technical background in backend systems, cloud infrastructure, or AI tooling
- Clear written and verbal communication; ability to translate pricing/business rules into robust systems.
Preferred Experience
- Knative or similar serverless-on-K8s frameworks.
- Container hardening and sandboxing.
- Policy-as-code and admission policy design at scale.
- eBPF-based observability, detections, and signal tuning.
- Multi-cloud exposure and cross-cloud identity approaches.
- Hands-on contributions to SOC 2 / HIPAA control automation and audit evidence pipelines.
Benefits
- A front-row seat to the generative AI infrastructure revolution
- Competitive compensation and benefits package
- Daily lunch and dinner provided; unlimited snacks and beverages
- Health check-up and top-tier hardware support
- Flexible working hours and a highly collaborative environment
About us
FriendliAI is building the next-generation AI inference platform that accelerates the deployment of large language and multimodal models with unmatched performance and efficiency. Our infrastructure powers high-throughput, low-latency workloads for global organizations and integrates directly with Hugging Face, providing instant access to over 600,000 open-source models. We are on a mission to deliver the world’s best platform for AI inference.
What this role asks for
Particular to this role
IAM · Serverless
Rare in FriendliAI's other 18 open postings.
Standard for security roles
AWS
Common in security postings at any company.
In most of FriendliAI's ads
Generative AI · Hugging Face · Kubernetes
Named in most of its open postings, whatever the role.
Compared with FriendliAI's other open jobs.
The team: Infrastructure HIRES STEADILY
This role is one of 3 open in Infrastructure. 1 was posted in the last 30 days and the oldest in August: a team that hires all year rather than one being built.
WHAT THE TEAM WORKS WITH, ACROSS ITS POSTINGS
AWS (3 of 3), Generative AI (3 of 3), Helm (3 of 3), Kubernetes (3 of 3), Terraform (3 of 3), Ansible (2 of 3), Golang (2 of 3)
OTHER ROLES ON THIS TEAM
- Software Engineer – Cloud Infrastructure posted Aug 12
- Software Engineer - Cloud Infrastructure posted Aug 7
From the team and dates on FriendliAI's own job board.
See Software Engineer salaries in San Francisco →
Similar jobs
- Senior Platform Engineer (Cloud Foundations) at Heartflow
Shares 6 skills: Helm, Serverless, IAM… · same city - Senior Software Engineer, Identity at Attentive
Shares 6 skills: Hugging Face, Helm, Serverless… · same country - Platform Engineer at Avalore, LLC
Shares 5 skills: Helm, IAM, Terraform… · same seniority · same country - Platform Engineer - Active TS/SCI with Full Scope Polygraph (FSP) at TOMORROW HIRE
Shares 5 skills: Helm, IAM, Terraform… · same seniority · same country - Software/AI developer at Rackner
Shares 6 skills: Hugging Face, Helm, Generative AI… · same seniority - Forward Deployed Engineer - AI Inference at FriendliAI
Also at this company
Is this your posting? Email info@careerholo.com to have it removed.