Staff Product Security Engineer

Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.About This RoleWe’re seeking a Staff Product Security Engineer with deep AI/ML security expertise to strengthen Crusoe’s security posture across applications, infrastructure, and distributed AI systems. This is a highly technical role focused on advanced penetration testing, AI/ML attack surface research, and building secure-by-design guardrails that engineering teams rely on.You’ll operate at the intersection of offensive security, AI systems, and production engineering; owning security outcomes end-to-end while influencing system design across the organization.What You’ll Be Working OnPerforming advanced manual penetration testing across complex applications, infrastructure, Kubernetes environments, and distributed microservice ecosystemsLeading offensive security initiatives including red team operations, adversary simulation, and security researchSecuring AI/ML systems end-to-end, including LLM pipelines, vector databases, RAG architectures, and agentic workflowsIdentifying and researching novel attack surfaces unique to LLMs and autonomous systems, contributing to internal and external AI security researchInfluencing secure system design across the SDLC, embedding security into CI/CD pipelines, container images, and deployment workflowsIntegrating and operationalizing security tooling (SAST, DAST, SCA, container scanning) and driving remediation of complex application-layer vulnerabilitiesBuilding internal security guardrails such as hardened base images, reusable libraries, and policy-as-code frameworksDeveloping production-grade security tooling and leading cross-functional security programs from design through deploymentWhat You’ll Bring to the Team8-10 years of deep hands-on experience in offensive security, including manual penetration testing, red team operations, and adversary simulationFamiliarity with modern C2 frameworks (e.g., Cobalt Strike, Sliver, Havoc), exploit development, and security researchStrong expertise across the AI/ML stack, including MLOps, inference architectures, vector databases, RAG, and agentic frameworks (e.g., ReAct, Reflexion)Experience building, deploying, and securing LLM pipelines and AI workflows in Kubernetes and/or bare-metal environmentsStrong software engineering foundations with experience shipping production code in Go, Python, or RustHands-on experience securing Kubernetes, containers, VMs, and CI/CD environmentsDeep understanding of application security vulnerabilities, secure coding practices, and distributed system designDemonstrated ability to lead complex, cross-functional security initiatives end-to-endStrong communication skills with the ability to influence both engineering teams and executive stakeholdersBonus PointsPublic contributions to offensive security or AI security research (talks, blogs, tooling, CVEs, etc.)Experience building internal red team or adversary simulation programsBackground in high-performance computing, AI infrastructure, or cloud-native platform securityExperience designing policy-as-code frameworks at scaleBenefits:Competitive compensationRestricted Stock UnitsPaid time off & paid holidaysComprehensive health, dental & vision insuranceEmployer contributions to HSA accountPaid parental leavePaid life insurance, short-term and long-term disabilityProfessional development & tuition reimbursementMental health & wellness supportCommuter benefits (parking & transit)Cell phone stipend401(k) Retirement plan with company match up to 4% of salaryVolunteer time offCompensation RangeCompensation will be paid in the range of up to $250,000 - $285,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicants knowledge, education, and abilities, as well as internal equity and alignment with market data.Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.LocationSan Francisco, CA - USEmployment TypeFull timeLocation TypeOn-siteDepartmentIT, Compliance, and Security