Runpod

Lead security threat modeling, code reviews, and implement security tools for web applications and APIs. | 5+ years in application or product security or software engineering with security focus, strong programming in Python, Go, or JavaScript/TypeScript, and knowledge of web vulnerabilities and security tools. | Job Description: • Lead threat modeling, architecture reviews, and code reviews for our web applications, APIs, and microservices. • Actively develop and commit code to fix security flaws in our Python, Go, or JavaScript/TypeScript codebases alongside the engineering team. • Implement, tune, and manage security testing tools (SAST, DAST, SCA) within our CI/CD pipelines to catch vulnerabilities early in the SDLC. • Configure and manage application-layer security controls, including Web Application Firewalls (WAF), bot protection, and API gateways. • Provide security guidance, secure coding training, and standard operating procedures to development teams. • Collaborate with operations to ensure product-level adherence to relevant frameworks (e.g., SOC 2, ISO 27001, GDPR) and participate in bug bounty triage. Requirements: • 5+ years of experience in application security, product security, or as a software engineer with a heavy security focus. • Strong programming and code-review skills in languages like Python, Go, JavaScript/TypeScript, or similar modern stacks. • Deep understanding of web application vulnerabilities (OWASP Top 10), API security (REST/GraphQL), and modern authentication flows (OAuth, OIDC, JWT). • Hands-on experience with offensive web security testing tools (e.g., Burp Suite, ZAP). • Experience building and maintaining automated security pipelines (DevSecOps). • Ability to translate complex security risks into actionable engineering tasks. Benefits: • Meaningful equity in a fast-growing company- everyone on the team receives stock options — your impact drives our growth, and you share in the upside. • Generous medical, dental & vision plans • Flexible PTO- take the time you need to recharge • Most roles are remote work first with an inclusive, collaborative teams utilizing slack as the main form of internal communication • $1,200 Home Office & Equipment Stipend- We set you up for success from day one with gear and support to create your ideal workspace

Lead product security including threat modeling, vulnerability remediation, DevSecOps, and security championing for customer-facing products and APIs. | 5+ years in application or product security with strong programming skills and experience in web application vulnerabilities, security testing tools, and automated security pipelines. | Runpod is the AI Developer Cloud. More than one million developers, from indie researchers to teams running frontier models in production, use Runpod to experiment, train, fine-tune, deploy, and scale AI on one platform. The platform has processed more than 20 billion inference requests. We closed a $100M Series A in June 2026. We're at an inflection point for AI infrastructure, and we're building the platform the next generation of developers will depend on. We're a small, remote-first team. We take ownership seriously, move fast, and ship work that more than a million developers rely on every day. We're looking for people who care deeply, build with urgency, and want to matter at scale. Learn more in our CEO's funding announcement: https://www.runpod.io/blog/one-million-developers. As RunPod continues to revolutionize the GPU cloud computing landscape, we are seeking a Full Stack Security Engineer to secure our customer-facing products, APIs, and internal services. This critical position will ensure the security of the software that powers our platform, enabling continued growth while protecting user data, billing systems, and web interfaces. The ideal candidate possesses strong software development abilities coupled with deep experience in application security, DevSecOps, and modern web architectures. You will embed directly with our engineering teams to ensure our product is secure by design. RunPod is seeking a proactive AppSec professional who believes in Integrated Security. You won't just toss PDF reports over the fence; you will write code to fix vulnerabilities, build automated security guardrails into our CI/CD pipelines, and foster a security-first culture among our developers. Responsibilities: • Product Security: Lead threat modeling, architecture reviews, and code reviews for our web applications, APIs, and microservices. • Vulnerability Remediation: Actively develop and commit code to fix security flaws in our Python, Go, or JavaScript/TypeScript codebases alongside the engineering team. • DevSecOps: Implement, tune, and manage security testing tools (SAST, DAST, SCA) within our CI/CD pipelines to catch vulnerabilities early in the SDLC. • Edge & Application Defense: Configure and manage application-layer security controls, including Web Application Firewalls (WAF), bot protection, and API gateways. • Security Championing: Provide security guidance, secure coding training, and standard operating procedures to development teams. • Compliance & Operations: Collaborate with operations to ensure product-level adherence to relevant frameworks (e.g., SOC 2, ISO 27001, GDPR) and participate in bug bounty triage. Required Qualifications: • 5+ years of experience in application security, product security, or as a software engineer with a heavy security focus. • Strong programming and code-review skills in languages like Python, Go, JavaScript/TypeScript, or similar modern stacks. • Deep understanding of web application vulnerabilities (OWASP Top 10), API security (REST/GraphQL), and modern authentication flows (OAuth, OIDC, JWT). • Hands-on experience with offensive web security testing tools (e.g., Burp Suite, ZAP). • Experience building and maintaining automated security pipelines (DevSecOps). • Ability to translate complex security risks into actionable engineering tasks. Preferred Qualifications: • Relevant application security certifications (e.g., OSWE, GWAPT, CISSP). • Experience securing cloud-native applications running on Kubernetes/Docker environments. • Background in managing bug bounty programs or coordinated vulnerability disclosures. What You’ll Receive: • The competitive base pay for this position ranges from ($152,000 - $175,000). This salary range may be inclusive of several career levels at Runpod and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location • Meaningful equity in a fast-growing company- everyone on the team receives stock options — your impact drives our growth, and you share in the upside. • Generous medical, dental & vision plans • Flexible PTO- take the time you need to recharge • Most roles are remote work first with an inclusive, collaborative teams utilizing slack as the main form of internal communication • Join a passionate team on the cutting edge of AI infrastructure — where culture, learning, and ownership are at the heart of how we scale. • $1,200 Home Office & Equipment Stipend- We set you up for success from day one with gear and support to create your ideal workspace Runpod is committed to maintaining a workplace free from discrimination and upholding the principles of equality and respect for all individuals. We believe that diversity in all its forms enhances our team. As an equal opportunity employer, Runpod is committed to creating an inclusive workforce at every level. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, protected veteran status, disability status, or any other characteristic protected by law. We welcome every qualified candidate eligible to work in the United States; however, we are currently unable to sponsor employment visas.

Develop and maintain frontend user interfaces and backend APIs using Python, Typescript, and Go, supporting open-source SDK and collaborating with AI teams. | Proficiency in Python, Typescript, modern web frameworks like React and FastAPI, passion for open-source, and strong problem-solving and communication skills. | Runpod is pioneering the future of AI and machine learning, offering cutting-edge cloud infrastructure for full-stack AI applications. Founded in 2022, we are a rapidly growing, well-funded company with a remote-first organization spread globally. Our mission is to empower innovators and enterprises to unlock AI's true potential, driving technology and transforming industries. Join us as we shape the future of AI. We are looking to hire a Full-Stack Engineer. As a Full-Stack Software Engineer at Runpod, you will work alongside experienced engineers and developers, contributing to the development of tools that bridge AI engineering and scalable infrastructure. This role offers a unique opportunity to grow your skills while making a tangible impact on the products and services that shape AI innovation. Responsibilities: Contribute to Frontend & Backend Development: Assist in building, maintaining, and enhancing user interfaces, APIs, and other core components of our platform using Python, Typescript, and Go Lang (with a primary focus on Python and Typescript). SDK Support & Development: Work with our open-source SDK to ensure it remains intuitive and effective for developers integrating with Runpod’s platform. Collaboration with Engineering & AI Teams: Support cross-functional teams by developing features and addressing bugs that enhance the user experience for AI engineers and researchers. Testing & Code Quality: Write clean, maintainable code with an emphasis on performance and scalability, following best practices for testing and continuous integration. Learning & Development: Participate in code reviews, mentorship opportunities, and continuous learning to deepen your expertise in full-stack development. Requirements: Programming Skills: Some experience with Python and/or Typescript, with a passion for growing in a full-stack role. Familiarity with Go Lang or other strict-type language is a plus. Web Development Knowledge: Strong experience of frontend technologies (HTML, CSS, JavaScript frameworks) and backend frameworks (e.g., React, Express, FastAPI, Pydantic, etc). Open Source Interest: Enthusiasm for open-source projects and contributions is a strong plus. Problem-Solving Skills: Eager to tackle challenges, learn from feedback, and work collaboratively within a dynamic team environment. Communication Skills: Ability to clearly communicate technical concepts and collaborate with other developers and non-technical team members. Successful completion of a background check. Preferred: Exposure to cloud platforms, distributed computing, or containerization technologies like Docker. Familiarity with modern best practices. Prior coursework or projects to showcase full-stack experience. Experience with Git and version control workflows. What You’ll Receive: The competitive base pay for this position ranges from ($130,000 - $200,000). This salary range may be inclusive of several career levels at Runpod and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location. Meaningful equity in a fast-growing AI infra company- everyone on the team receives stock options — your impact drives our growth, and you share in the upside. Generous medical, dental & vision plans. Flexible PTO- take the time you need to recharge. Most roles have are remote work first with an inclusive, collaborative teams utilizing slack as the main form of internal communication. Join a passionate team on the cutting edge of AI infrastructure — where culture, learning, and ownership are at the heart of how we scale. $1,200 Home Office & Equipment Stipend- We set you up for success from day one with gear and support to create your ideal workspace. Runpod is committed to maintaining a workplace free from discrimination and upholding the principles of equality and respect for all individuals. We believe that diversity in all its forms enhances our team. As an equal opportunity employer, Runpod is committed to creating an inclusive workforce at every level. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, marital status, protected veteran status, disability status, or any other characteristic protected by law. We welcome every qualified candidate eligible to work in the United States; however, we are currently unable to sponsor employment visas.