Infrastructure Security Engineer

🕒 4 days ago

🇺🇸 United States – Remote

💵 $240k - $290k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Runway

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2018

🤖 Artificial Intelligence

☁️ SaaS

📱 Media

Artificial Intelligence • SaaS • Media

Runway is a company building foundational "Real-World Intelligence" — large models and systems that can understand, simulate and act in the visual world. It offers three main product platforms built on these models: Runway Creative, an all‑in‑one cloud creative suite for generating and editing video, images and audio for individuals and teams; Runway Dev, an AI media platform and API for developers to run models, compose pipelines and trigger workflows; and Runway Robotics, a toolkit for photorealistic simulation, policy inference and synthetic data generation powered by their General World Model (GWM-1). Runway also publishes research (e. g. , GWM-1, Gen-4. 5 video model) and serves both individual creators and enterprise customers.

📋 Description

• Design and ship security controls across Kubernetes clusters, including admission policy, RBAC, workload identity, network policy and runtime hardening • Harden the software supply chain from dependency intake through build and deployment • Own cloud IAM and identity architecture, including least-privilege roles, short-lived credentials and workload federation • Secure research infrastructure and training pipelines, including model weights and datasets • Threat model new platform components and translate findings into actionable requirements • Build guardrails for AI agents and developer tooling operating inside the infrastructure • Write infrastructure as code and policy as code • Support incident response for infrastructure-related incidents with rapid system analysis and containment guidance • Collaborate with platform and engineering teams and ship production security controls

🎯 Requirements

• Hands-on experience securing Kubernetes in production, including admission policies, RBAC and workload identity • Working knowledge of cloud IAM and networking on at least one major cloud platform • Understanding of identity federation and short-lived credentials • Experience with infrastructure as code and GitOps-style deployment • Comfort writing Python, TypeScript, Rust or another language for tooling • Understanding of software supply chain attacks and controls including signing, provenance, SBOMs and admission enforcement • Clear technical writing for design docs, threat models and engineering explanations • Judgment about security-control enforcement and safe rollout of breaking changes • Experience securing GPU or HPC-style compute, training pipelines or research environments is a plus • Experience with policy engines and admission controllers such as Kyverno, OPA Gatekeeper or Falco is a plus • Experience with multi-tenant isolation design, ABAC, scoped credentials and per-tenant boundaries is a plus • Experience producing security architecture evidence for SOC 2, ISO 27001 or other audits is a plus • Open source contributions or published work in cloud or Kubernetes security is a plus