Inferact
Member of Technical Staff, Vulnerability Management
San Francisco · Staff+
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →H-1B wage level
the lottery is wage-weighted — each level is one more entry
$21,187 more — $221,187 — moves this role to Level IV and 4 lottery entries. That figure is inside the range the employer already advertised.
Based on the DOL prevailing wage for this occupation and worksite, a base salary of $221,187 would place this position at wage Level IV. That figure is within the posted range, and I'd like to target it. This role classifies under "Software Developers" for prevailing-wage purposes.
DOL prevailing wage, 2026-27 wage year · Software Developers (15-1252) · San Francisco-Oakland-Fremont, CA. Wage level is derived by USCIS from the offered wage, occupation and worksite; the occupation shown is inferred from the job title.
Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Inferact's mission is to grow vLLM as the world's AI inference engine and accelerate AI progress by making inference cheaper and faster.
- You'll also identify practical security best practices that strengthen vLLM as it evolves.
- This is a hands-on product security role that combines technical investigation, sound judgment, and ownership of follow-through.
Responsibilities
- You'll develop a deep understanding of vLLM's architecture, independently investigate vulnerability reports, and turn technical findings into clear, actionable work for the core team.
- Working primarily in open source, you'll collaborate with vLLM maintainers, Red Hat counterparts, security firms, and researchers working with frontier AI models.
- You'll drive reports from initial triage through analysis and resolution, helping coordinate fixes, security advisories, and releases under the project's established process.
Requirements
- Hands-on product security experience, with a strong orientation toward infrastructure software and the security of complex software systems.
- Ability to read source code, debug unfamiliar systems, reproduce reported issues, and explain root cause and practical security impact rather than simply forward findings.
- Strong systems reasoning, including the ability to understand architecture, trust boundaries, deployment assumptions, and how different software components interact.
- Strong written and verbal communication, discretion with sensitive reports, and the ability to work constructively with engineers, researchers, and external security collaborators.
Nice to have
- Experience with vulnerability management and security best practices for open-source infrastructure software.
- Experience coordinating vulnerability resolution across reporters, maintainers, security teams, and software releases.
- Familiarity with vLLM, inference engines, ML infrastructure, or similarly complex distributed software
- prior vLLM contributions are helpful but not required.
- Experience preparing security advisories, assessing affected versions, and working with CVE and coordinated-disclosure workflows.
- Experience translating security findings into practical architecture reviews, regression tests, secure development practices, or deployment guidance.
- Helped resolve vulnerabilities in an open-source infrastructure project and can explain your technical contribution and coordination with maintainers.
- Built security tooling or automation that improved investigation quality or reduced repetitive triage work.
Compensation
- Depending on background, skills, and experience, the expected annual salary range for this position is $200,000 - $400,000 USD + equity.
Benefits
- Applicable benefits will be confirmed based on the final role location.
Company info
- Founded by the creators and core maintainers of vLLM, we sit at the intersection of models and hardware, a position that took years to build.
- We're looking for a Member of Technical Staff, Vulnerability Management to own Inferact's side of vLLM's vulnerability-management process and help keep a critical piece of AI infrastructure secure and production-grade.
Visa & Work Authorization
- We sponsor visas on a case-by-case basis.
This listing is sourced directly from Inferact's careers page and normalized into a canonical job model.