Infrastructure Security Engineer

Runway ML
United States
Workplace: RemoteFull timeUSD 240,000 - 290,000 annuallyFunction: CybersecuritySkills: ["Clear writing","Threat modeling","Judgment","Incident response support"]

Build and ship infrastructure security controls for the platform that trains and serves frontier AI models. You’ll secure Kubernetes clusters (admission policy, RBAC, workload identity, network policy, runtime hardening), harden the software supply chain (signing, provenance, SBOMs, admission enforcement), and own cloud IAM/identity architecture. Work with incident response, threat model new components, and write policy and infrastructure-as-code tooling in production.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Runway ML
Runway ML
12 hours ago

Infrastructure Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Build and ship infrastructure security controls for the platform that trains and serves frontier AI models. You’ll secure Kubernetes clusters (admission policy, RBAC, workload identity, network policy, runtime hardening), harden the software supply chain (signing, provenance, SBOMs, admission enforcement), and own cloud IAM/identity architecture. Work with incident response, threat model new components, and write policy and infrastructure-as-code tooling in production.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Design and ship security controls in the Kubernetes ecosystem, including admission policy, RBAC, workload identity, network policy, and runtime hardening across clusters.
  • •Harden the software supply chain from dependency intake through build and deploy, including package firewalling, artifact signing, provenance, and admission controls.
  • •Own cloud IAM and identity architecture, implementing least-privilege roles, short-lived credentials, and workload federation.
  • •Secure research infrastructure and training pipelines, protecting access to model weights and datasets without slowing users.
  • •Threat model new platform components and translate findings into actionable requirements, plus provide infrastructure-specific incident response support.

Pay and Benefits

Salary: USD 240,000 - 290,000 annually

Key Requirements

  • •Hands-on experience securing Kubernetes in production, including admission policies, RBAC, and workload identity.
  • •Working knowledge of cloud IAM and networking on a major cloud platform, including identity federation and short-lived credentials.
  • •Experience with infrastructure as code and GitOps-style deployment practices for shipping security changes through the same pipeline.
  • •Ability to write tooling in Python, Typescript, Rust (or another language), not just scripts.
  • •Understanding of software supply chain attacks and controls such as signing, provenance, and SBOMs.
Skills:Clear writingThreat modelingJudgmentIncident response support
Tech Stack:KubernetesRBACWorkload identityNetwork policyRuntime hardeningCloud IAMIdentity federationShort-lived credentialsWorkload federationLeast-privilegeInfrastructure as codeGitOpsPackage firewallingArtifact signingProvenanceSBOMsAdmission controlsPythonTypescriptRust

Company Brief

Runway ML
Provides generative AI tools and a creative platform for creators and studios to generate, edit, and collaborate on images, video, and other media using state-of-the-art machine learning models.
Industry: AI & Machine Learning
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series C
Headquarters: New York, United States
Founded: 2018
WebsiteLinkedIn