Security Engineer, Infrastructure

Security Engineer, Infrastructure LocationSan FranciscoEmployment TypeFull timeLocation TypeOn-siteDepartmentEngineeringCompensation$200K – $325KActual compensation will depend on experience and skills. In addition to salary, we offer meaningful early-stage equity and a range of benefits to support your well-being and growth — including comprehensive health coverage, flexible PTO, daily lunches and snacks, onsite gym access, and regular team events and offsites.Who We AreServal is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations.At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering.Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving.We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. Role OverviewAs Infrastructure Security Lead, you'll build and scale the foundations of how Serval secures its cloud, compute, and platform infrastructure. You will set the strategy and drive execution for securing our AWS environments, Kubernetes clusters, container runtimes, and the production systems our customers trust us to operate in; making security a property of the infrastructure itself rather than a control bolted on afterward.You'll be a hands-on leader with deep technical credibility and strong engineering instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that secure-by-default infrastructure, least-privilege access, and strong isolation boundaries are designed into the systems that power Serval.What You'll DoDesign, implement, and operate Serval's infrastructure security program across cloud (AWS), Kubernetes, container runtimes, networking, and CI/CD, including hardening, configuration baselines, workload isolation, and continuous posture management.Own cloud and identity security, driving least-privilege IAM, secrets management, key management, network segmentation, and the guardrails that keep our multi-tenant production environment safe at scale.Secure the container and orchestration stack end-to-end. Image provenance and supply-chain integrity, registry and admission controls, runtime sandboxing and isolation, and Kubernetes hardening (RBAC, network policies, pod security), with particular attention to the isolated workers that execute customer workflows.Build, lead, and directly mentor a team spanning cloud security, platform/Kubernetes security, and infrastructure vulnerability management, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow.Drive infrastructure vulnerability management and remediation, partnering with engineering to identify, prioritize, and durably close exposure across cloud configuration, dependencies, base images, and the software supply chain.Embed security into the platform by design, partnering deeply across Engineering, Product, and Infrastructure so that secure defaults, paved roads, and policy-as-code are the easiest path for...