Security Engineer, Bare Metal

FluidStack
New York, San Francisco, Austin, Seattle, United States
Workplace: OnsiteFull timeUSD 168,000 - 225,000 annuallyFunction: CybersecuritySkills: ["High ownership","Autonomy","Velocity","First principles thinking","Collaboration","Clear communication"]

Own end-to-end security for FluidStack’s bare-metal compute fleet, from supply chain and provisioning to hardening, operations, and secure decommissioning. Design hardened golden OS images with vulnerability scanning and patch pipelines, enforce BMC security (access control, credential rotation, audit logging, firmware integrity), and partner on network micro-segmentation, IDS/IPS, and zero-trust firewall architecture. Lead threat modeling, security reviews, and incident response across physical infrastructure.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
FluidStack
FluidStack
1 month ago

Security Engineer, Bare Metal

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Own end-to-end security for FluidStack’s bare-metal compute fleet, from supply chain and provisioning to hardening, operations, and secure decommissioning. Design hardened golden OS images with vulnerability scanning and patch pipelines, enforce BMC security (access control, credential rotation, audit logging, firmware integrity), and partner on network micro-segmentation, IDS/IPS, and zero-trust firewall architecture. Lead threat modeling, security reviews, and incident response across physical infrastructure.
Location: New York, San Francisco, Austin, Seattle, United States
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own end-to-end security for servers in the bare metal fleet, covering supply chain and provisioning through hardening, operation, and secure decommissioning.
  • •Design and maintain hardened golden OS images with automated vulnerability scanning, patch pipelines, and configuration-drift detection.
  • •Define and enforce the BMC security model, including access control, credential rotation, audit logging, and firmware integrity.
  • •Partner with network engineering on micro-segmentation, IDS/IPS, and firewall architecture, applying zero-trust from the top-of-rack up.
  • •Lead threat modeling and security reviews for new hardware platforms and network designs, and respond to incidents affecting the physical fleet.

Pay and Benefits

Salary: USD 168,000 - 225,000 annually
Equity and Bonus:Equity

Key Requirements

  • •Experience in information security or infrastructure engineering with a focus on bare metal, IaaS, or high-scale cloud infrastructure.
  • •Deep Linux hardening (SELinux, AppArmor, kernel-level security) and command network security (TCP/IP, VPNs, firewall rulesets, zero-trust).
  • •Hands-on encryption including disk-level (LUKS) and hardware-level; understanding of HSMs and trusted computing (TPM/TXT).
  • •Automation experience in Python, Go, or Rust, plus configuration management using Ansible, Puppet, or Chef.
  • •Ability to work across engineering teams and communicate security decisions clearly.
Experience:Infrastructure engineeringBare metalIaaSHigh-scale cloud
Skills:High ownershipAutonomyVelocityFirst principles thinkingCollaborationClear communication
Certifications:CISSPOSCPCEH
Tech Stack:LinuxSELinuxAppArmorTCP/IPVPNFirewall rulesetsZero-trustIDS/IPSMicro-segmentationLUKSHSMsTPMTXTPythonGoRustAnsiblePuppetChefBMC

Company Brief

FluidStack
Builds and deploys large-scale GPU cloud infrastructure for AI labs, enterprises and governments, providing high-performance AI training and inference capacity and rapid data-center deployment services.
Industry: Cloud Computing
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Funding: Series A
Headquarters: New York, United States
Founded: 2017
Glassdoor
Glassdoor: 4.7
WebsiteLinkedInGlassdoor