[Remote] AI Infrastructure Security Engineer

Note: The job is a remote job and is open to candidates in USA. Brain Co. builds AI-native operating systems for large, regulated institutions. The Security Engineer, Infrastructure will secure the AI platform across cloud infrastructure, Kubernetes, identity, networking, and AI systems while building secure-by-default infrastructure, threat models, and security guardrails. The role partners closely with infrastructure, platform, product, and ML teams to protect customer data and agent workloads.

Responsibilities

• Build the security foundations of our AI platform: identity, isolation, secrets management, and access control across cloud and Kubernetes environments
• Harden infrastructure end-to-end from cloud networking and service meshes to CI/CD pipelines and the data and model pipelines powering Brain Co's AI capabilities work
• Implement Zero Trust principles and machine identity across workloads; short-lived credentials, least-privilege access, and encrypted service communication
• Protect customer data and the agent workloads running on our platform. Design secure execution environments and data access pathways for code and actions taken by agents on our systems
• Build security guardrails directly into infrastructure and deployment workflows using Infrastructure-as-Code (Terraform) so security scales with the platform
• Own threat modeling across infrastructure layers—identifying and remediating risks before they become incidents
• Own security for Brain Co's forward-deployed infrastructure — designing and hardening bespoke VPCs and customer-environment deployments where every engagement brings its own unique attack surface
• Partner with platform, infra, product, and ML teams to ship code and infrastructure together as a true partner so engineers move fast with secure-by-default systems

Skills

• Have 5+ years of experience in security engineering, infrastructure, or SRE with hands-on experience building or securing production systems at scale
• Are fluent in cloud security fundamentals (IAM, networking, KMS, secrets, isolation) across AWS, GCP, or Azure
• Have designed and implemented secure systems end-to-end not just reviewed them after the fact
• Have hands-on experience with Kubernetes, container security, and Linux systems
• Think in terms of threat models, trust boundaries, and failure modes and can translate that into concrete controls
• Enjoy building paved roads and guardrails using Infrastructure-as-Code (Terraform preferred) so the whole team moves faster safely
• Have experience with authentication and authorization systems, secrets management, and cryptography basics
• Are a hands-on builder who is energized by writing code, shipping infrastructure, and partnering directly with infra and platform engineers rather than advising from the sidelines
• Thrive in ambiguous, high-agency environments and want ownership of the infrastructure security function as it grows
• Experience with ML systems or multi-tenant platform isolation
• Familiarity with service mesh and zero-trust architectures
• Proficiency in Go, Python, or a similar language for automation and tooling

Benefits

• Meaningful equity in a high-growth company
• Daily lunches
• Commuter benefits
• 401(k)
• Medical, Dental, and Vision
• Unlimited PTO

Company Overview

Company H1B Sponsorship