Member of Technical Staff, Security
- Compensation
- Not disclosed
- Location
- San Francisco
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Software engineering
- Posted
Skills
Nice to have
- Built a security engineering function at an early-stage infrastructure or enterprise software company.
- Secured multi-tenant compute platforms, bare-metal fleets, or customer-managed workloads.
- Worked with macOS, Apple Silicon, host security, secure boot, or hardware-backed credentials.
- Built compliance automation, policy-as-code, or continuous control monitoring.
- Implemented workload identity, artifact signing, build provenance, or isolated build environments.
- Supported enterprise requirements for data residency, customer-managed encryption, or dedicated environments.
- Built security controls for coding agents, computer-use systems, or execution of untrusted code.
Full description
Mount Thor is hiring a security engineer to build and operate the systems that protect our infrastructure, customer workloads, and data.
Who We Are
Mount Thor makes Apple hardware (macOS and Apple Silicon) available and performant at datacenter scale for AI workloads. We take consumer hardware and build the infrastructure platform around it to enable consumption as elastic compute exposed through developer-friendly interfaces. Our customers use us to develop computer-use model capabilities, deploy long-running agents, and accelerate agentic engineering.
The Role
You will own security engineering and the CI/CD systems that build, test, and deploy Mount Thor’s software. Your responsibilities span software delivery, infrastructure automation, customer data protection, and the engineering controls behind enterprise compliance.
You will write code, implement controls, and work directly with engineers to secure the systems we build and operate. You will also own the technical work behind our SOC 2 Type 2 program and enterprise customer security requirements, from implementing controls to producing evidence that they work.
You will work closely with Platform, Fleet, Network Infrastructure, and Operations, and represent our security architecture in conversations with customers and auditors.
In this role you will
- Build security into our infrastructure and products. Review designs, threat model systems, and implement protections across APIs, cloud environments, containers, host systems, and customer workload isolation.
- Own CI/CD and DevOps engineering. Build and operate our build, test, and deployment pipelines, runners, artifact repositories, and infrastructure automation. Own environment provisioning, release workflows, deployment verification, and rollback. Improve delivery speed, reliability, and developer experience. Integrate security scanning, secrets management, artifact provenance, and access controls throughout these systems.
- Own identity, access, and secrets management. Implement least privilege, service identity, privileged access, credential rotation, and access reviews across production and internal systems. Build access controls for both people and software agents.
- Protect customer data throughout its lifecycle. Build controls for data collection, access, encryption, retention, deletion, and logging. Work with engineering and legal partners to translate privacy requirements and customer commitments into enforceable system behavior.
- Build and operate our SOC 2 Type 2 controls. Translate requirements into engineering work, automate evidence collection and control checks, coordinate technical walkthroughs with auditors, and drive findings through remediation. Keep evidence connected to how production systems actually operate.