Sr. Staff Security Engineer, Platform Security

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.
If you join our team, you’ll be contributing to building the technology that powers the future.
We are hiring a Senior Staff Security Engineer as a founding member of Nscales Platform Security program. Your job is to go deep on how our IaaS platform is actually built — not how the diagrams say it is built — and to perform the security reviews that tell leadership and customers where it holds, where it doesnt, and what it will take to close the gap.
The scope is the infrastructure layer: the GPU compute platform, storage, virtual networking, and Kubernetes. Across each of these youll map the architecture, define what secure looks like, review designs and implementations against that standard, test isolation boundaries, and produce assurance evidence. You will spend most of your time inside the platform — reading configuration, tracing data and control paths, breaking isolation assumptions, and working alongside platform, SRE, and infrastructure engineering to land fixes. You will have done this before, at a cloud services provider, where the platform was the product.
Platform security reviews

Perform deep-dive security reviews of Nscales IaaS services, one service at a time, producing a documented architecture, threat model, findings, and remediation plan for each.
Define the security requirements baseline for each service and review designs and implementations against it.
Advise leadership on what is known, verified, accepted, and required to close platform security gaps.
GPU compute platform

Assess the out-of-band management plane and its separation from tenant-reachable networks.
Review block, object, and file storage services for tenant data separation, encryption at rest and in transit, key management, and access-path control.
Virtual networking

Review the virtual network layer: overlay and underlay design, tenant segmentation, east-west controls, and the boundary between tenant networks and the management plane.
Review multi-tenant Kubernetes: admission control, workload identity, runtime and node hardening, network policy, and container escape paths.
Drive testing of isolation boundaries and gather evidence that demonstrates customer workloads are separated.
Engineering partnership

Partner with platform, SRE, and infrastructure engineering to land fixes and secure-by-default patterns.
Assurance reviews shipped
12+ years in security engineering, platform/infrastructure engineering, or security architecture, with a deep platform security focus.
~ Experience at a cloud services provider — you have secured or assessed IaaS services where the platform was the product and tenants were untrusted by default.
~ Deep understanding of multi-tenant isolation across bare metal, hypervisors, container boundaries, and network segmentation — including what it takes to prove separation rather than assert it.
~ Strong grasp of storage security in a multi-tenant setting: encryption and key management, access-path control, and data lifecycle across snapshots, backups, and reuse.
~ Working knowledge of virtual networking: overlay/underlay design, segmentation, and management-plane separation.
~ Proven ability to influence engineering organisations you dont manage, set standards, win arguments through evidence, and drive remediation without formal authority.
~ Were building something extraordinary, and we want you at the core.

Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months.
Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨
Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around lifes moments.
We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.
For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.
In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation.
For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.