Topazlabs

Topazlabs

Staff Security Engineer

Dallas, TX · Staff+ · Full-time

Sponsorship not specifiedDetected 240 days ago
PythonBashAWSCloud PlatformsLinuxDeep LearningPenetration TestingNetwork SecurityDesign SystemsSupply Chain

About the role

  • Secure the Hybrid Infrastructure (AWS & Colo): You will be the single owner for security across our cloud environments and our physical colocation data centers.
  • You ensure our creative workflows are secure without being obstructive.

Responsibilities

  • You will design systems to protect our model weights during training, storage, and delivery, ensuring they are tamper-proof and secure from theft or reverse engineering.
  • Secure the AI Supply Chain: Our models are our most valuable IP. You will design systems to protect our model weights during training, storage, and delivery, ensuring they are tamper-proof and secure from theft or reverse engineering.
  • We'd still like to hear from you-we are passionate about developing a diverse team and culture, so please apply if you're interested!

Requirements

  • You are a hands-on generalist.
  • You are just as comfortable configuring an IAM policy in AWS as you are setting up a switch in a colocation rack or writing a script for Jamf.
  • You have a craftsmanship mentality.
  • You are an infrastructure native.
  • You are fluent in Linux internals, networking, and container orchestration.
  • You are willing to have hard conversations about risk and prioritize fixing root causes over applying band-aids.
  • 7+ years of experience in security engineering, with a mix of infrastructure, corporate IT, and offensive security.
  • Deep hands-on experience with cloud security and compliance (AWS, IAM, VPC, SOC II, Vanta).
  • Proven experience with Endpoint Management & Identity: Expert-level knowledge of Jamf for macOS management and Active Directory (or modern equivalents) for identity governance.
  • Offensive Security: Demonstrated ability to perform manual penetration testing (network and web app).Proficiency in scripting (Python/Bash) to automate security tasks.
  • Physical & Network Security: Experience securing physical office networks and colocation facilities (firewalls, VPNs, switching).
  • Bonus: Experience securing on-device software or desktop applications (Windows/macOS).
  • Do you meet most but not 100% of the above? We'd still like to hear from you-we are passionate about developing a diverse team and culture, so please apply if you're interested! This is a unique role for someone interested in making a deep impact at a high-growth tech software company. We offer strong base salary, plus significant ownership that scales with the company's growth. We also offer 100% covered medical/dental/vision for employees, 15 days annual PTO, 5 personal days plus holidays, and 401k matching. This is a full-time onsite role in Dallas, TX, and we will ask you to relocate if you're not in the area.

Nice to have

  • Experience securing on-device software or desktop applications (Windows/macOS).
  • Do you meet most but not 100% of the above?
  • This is a unique role for someone interested in making a deep impact at a high-growth tech software company.

Skills

  • This includes configuring firewalls, managing physical network security, and hardening our Linux GPU clusters.

Compensation

  • We offer strong base salary, plus significant ownership that scales with the company's growth.

Benefits

  • We also offer 100% covered medical/dental/vision for employees, 15 days annual PTO, 5 personal days plus holidays, and 401k matching.

This listing is sourced directly from Topazlabs's careers page and normalized into a canonical job model.