Senior Security Engineer

TensorWave is dedicated to delivering seamless, secure, reliable, and resilient AI compute at scale. The Senior Security Engineer will be responsible for designing and implementing security architecture, securing high-performance computing environments, and ensuring compliance with security standards.

Responsibilities:

• Architect and build security across the stack. Partner with Core Architecture and DevOps on threat modeling, design reviews, and the automated guardrails that let engineering move fast without breaking the security promise
• Harden the fabric, cradle to grave. Own hardware lifecycle security across our AMD Instinct clusters and high-speed fabrics (InfiniBand / RoCE). Build the code behind TPM 2.0 / Secure Boot, cryptographic attestation, and programmable trust
• Lead our open firmware security commitment. Keep our OpenBMC, coreboot, and ROCm ecosystems continuously secure, auditable, and open. Design and implement the tooling that makes hardware management transparent by default
• Engineer Zero-Trust IAM. Design and implement least-privilege automation across the management plane, with identity-based micro-segmentation wired into our orchestration engines
• Make compliance push-button. Act as the CISO's right hand scaling SOC2 and ISO 27001. Replace manual evidence collection with continuous monitoring and 'always-on' controls
• Operate as a purple teamer. Think like an attacker, then ship the telemetry, detections, and hardening to close what you found
• Evangelize Security-as-Code. Version-controlled policy, shift-left integration, self-healing infrastructure. Manual configuration is a vulnerability we don't accept

Requirements:

• Deep experience securing High-Performance Computing or large GPU environments, including Linux internals and high-speed fabric isolation (InfiniBand / RoCE)
• Strong coding chops in Go, Python, or Rust you build functions that run themselves rather than dashboards that need to be watched
• Hands-on with Infrastructure-as-Code (Terraform, Pulumi, Ansible) and Kubernetes at production scale
• Working knowledge of hardware roots of trust: TPM 2.0, Secure Boot, measured boot, attestation
• Proven track record building Zero-Trust architectures and driving SOC2 / ISO 27001 programs toward automation
• Background in a fast-scaling startup or high-end security consultancy where you built things from scratch and then wrote the code to keep them secure
• Architect-builder mindset: equally comfortable in a whiteboard session and a pull request review
• Familiarity with open firmware stacks (OpenBMC, coreboot) and the AMD / ROCm ecosystem is a strong plus