Senior Software Engineer, Fireworks AI

• 5+ years of experience in software engineering with a strong focus on security, infrastructure, or cloud systems
• Proficient in Python and/or Go with experience in designing production-grade systems
• Deep understanding of cloud-native architectures using AWS, GCP, or Oracle Cloud, particularly in the area of authentication, authorization, encryption, data protection, and intrusion detection
• Hands-on experience with Kubernetes, Docker, and containerized environments
• Familiarity with security tooling in CI/CD environments (e.g., GitHub Actions, Jenkins, CircleCI)
• Comfort working in Linux environments and command-line tooling
• Familiarity with modern identity and access controls (OAuth, OIDC, SSO, RBAC/ABAC)

Desirable

• As the Lead Software Engineer of Security and Compliance at Fireworks AI, you will be responsible for envisioning and implementing a world class security program from the ground up. Security is the foundation of trust in AI systems
• As more organizations rely on large language models and cloud-native AI services, ensuring the confidentiality, integrity, and availability of data, models, and infrastructure is paramount. This role is critical to building that trust—by designing and embedding security into every layer of our technology stack
• Design and develop security-focused software solutions to protect customer data, models, and services across our multi-cloud infrastructure
• Lead the technical architecture of security and privacy features, including encryption, identity and access management, secure API gateways, secure model execution, and sandboxing strategies
• Designing a scalable security program by leveraging automation wherever possible
• Implement and champion a Secure Software Development Lifecycle (SSDLC), including secure-by-default frameworks, build pipelines, and runtime enforcement
• Perform security reviews of cloud-native architectures, including Kubernetes clusters, multi-cloud workloads, and distributed data stores
• Develop and integrate tools for continuous security monitoring, anomaly detection, and automated response
• Embed compliance and regulatory controls into infrastructure and product layers (e.g., SOC 2, ISO 27001, HIPAA, GDPR)
• Own and evolve internal developer security tooling—e.g., CI/CD integrations with scanners (e.g., Snyk, Semgrep), secrets detection, IaC security
• Lead incident response efforts, red/blue team coordination, and post-mortem analysis