AI Infrastructure Security Engineer

Brain Co. builds AI-native operating systems for large, regulated institutions. As an AI Infrastructure Security Engineer, you will secure the platform layer end-to-end, including cloud infrastructure and Kubernetes, while partnering closely with the infra team to build secure-by-default infrastructure.

Responsibilities:

• Build the security foundations of our AI platform: identity, isolation, secrets management, and access control across cloud and Kubernetes environments
• Harden infrastructure end-to-end from cloud networking and service meshes to CI/CD pipelines and the data and model pipelines powering Brain Co's AI capabilities work
• Implement Zero Trust principles and machine identity across workloads; short-lived credentials, least-privilege access, and encrypted service communication
• Protect customer data and the agent workloads running on our platform. Design secure execution environments and data access pathways for code and actions taken by agents on our systems
• Build security guardrails directly into infrastructure and deployment workflows using Infrastructure-as-Code (Terraform) so security scales with the platform
• Own threat modeling across infrastructure layers—identifying and remediating risks before they become incidents
• Own security for Brain Co's forward-deployed infrastructure — designing and hardening bespoke VPCs and customer-environment deployments where every engagement brings its own unique attack surface
• Partner with platform, infra, product, and ML teams to ship code and infrastructure together as a true partner so engineers move fast with secure-by-default systems

Requirements:

• 5+ years of experience in security engineering, infrastructure, or SRE with hands-on experience building or securing production systems at scale
• Fluent in cloud security fundamentals (IAM, networking, KMS, secrets, isolation) across AWS, GCP, or Azure
• Designed and implemented secure systems end-to-end not just reviewed them after the fact
• Hands-on experience with Kubernetes, container security, and Linux systems
• Think in terms of threat models, trust boundaries, and failure modes and can translate that into concrete controls
• Enjoy building paved roads and guardrails using Infrastructure-as-Code (Terraform preferred) so the whole team moves faster safely
• Experience with authentication and authorization systems, secrets management, and cryptography basics
• Hands-on builder who is energized by writing code, shipping infrastructure, and partnering directly with infra and platform engineers rather than advising from the sidelines
• Thrive in ambiguous, high-agency environments and want ownership of the infrastructure security function as it grows
• Experience with ML systems or multi-tenant platform isolation
• Familiarity with service mesh and zero-trust architectures
• Proficiency in Go, Python, or a similar language for automation and tooling