Fluidstack
Security Engineer, Bare Metal
$224K–$275K
New York, NY +3 · On-site · Full-time · Posted Jul 17, 2026
- Location
- New York, NY
San Francisco, CA
Austin, TX
Seattle, WA
About the job
Own and build end-to-end security for Fluidstack’s bare-metal server fleet, from supply chain and provisioning through operations and decommissioning.
What you'll do
- Design hardened OS images and automate vulnerability scanning, patching, and configuration-drift detection.
- Define BMC security and partner on network segmentation, intrusion detection, firewalls, encryption, and fleet-scale secure defaults.
- Lead threat modeling and security reviews for hardware and network designs, and respond to incidents involving the physical fleet.
What they ask for
- Experience in information security or infrastructure engineering focused on bare metal, IaaS, or high-scale cloud infrastructure.
- Deep Linux hardening and network security knowledge, including TCP/IP, VPNs, firewall rulesets, and zero-trust.
- Practical disk-level and hardware-level encryption experience, with understanding of HSMs and trusted computing (TPM/TXT).
- Automation skills in Python, Go, or Rust, and experience with configuration management.
Nice to have
- BMC platforms, hardware root of trust and secure boot, or compliance standards such as SOC 2, ISO 27001, and FedRAMP.
- CISSP, OSCP, or CEH.
Pay
$224K – $275K USD base salary
Tools
Linux, SELinux, AppArmor, TCP/IP, VPNs, LUKS, Python, Ansible
AI focus
Secures bare-metal infrastructure hosting frontier AI compute and model weights.
Model-written summary · the original posting is authoritative