runway-ml - Infrastructure Security Engineer

• Hands-on experience securing Kubernetes in production: you've written admission policies, debugged RBAC and workload identity problems and understand how a cluster gets compromised • Working knowledge of cloud IAM and networking on at least one major cloud platform, including how identity federation and short-lived credentials actually work • Experience with infrastructure as code and GitOps-style deployment, and the habit of shipping security changes through the same pipeline as everything else • Comfort writing Python, Typescript, Rust or another language to build tooling, not just scripts • An understanding of software supply chain attacks and the controls that stop them: signing, provenance, SBOMs, admission enforcement • Clear writing. Design docs, threat models and explanations to engineers who don't work in security are all part of the job • Judgment about which controls to enforce, which to recommend and how to roll out a breaking change without breaking the company • Experience securing GPU or HPC-style compute, training pipelines or research environments • Experience with policy engines and admission controllers (Kyverno, OPA Gatekeeper, Falco or similar) • Multi-tenant isolation design in a cloud environment: ABAC, scoped credentials, per-tenant boundaries • Experience producing security architecture evidence for SOC 2, ISO 27001 or other audits and customer assessments • Open source contributions or published work in cloud or Kubernetes security • Runway strives to recruit and retain exceptional talent from diverse backgrounds while ensuring pay equity for our team. Our salary ranges are based on competitive market rates for our size, stage and industry, and salary is just one part of the overall compensation package we provide. • There are many factors that go into salary determinations, including relevant experience, skill level and qualifications assessed during the interview process, and maintaining internal equity with peers on the team. The range shared below is a general expectation for the function as posted, but we are also open to considering candidates who may be more or less experienced than outlined in the job description. In this case, we will communicate any updates in the expected salary range. • Lastly, the provided range is the expected salary for candidates in the U.S. Outside of those regions, there may be a change in the range, which again, will be communicated to candidates. • WORKING AT RUNWAY • Great things come from great teams. https://www.youtube.com/watch?v=kwmj4ato2kw&ab_channel=Runway We’d love to hear from you. • We’re committed to creating a space where our employees can bring their full selves to work and have equal opportunity to succeed. So regardless of race, gender identity or expression, sexual orientation, religion, origin, ability, age, veteran status, if joining this mission speaks to you, we encourage you to apply.