Security Engineer, Infrastructure

About the role

WHO WE ARE

Serval http://serval.com/ is the AI-native enterprise service management platform that automates the work legacy IT service management tools only track. Our AI agents build the automations that power employee support, then resolve requests against them instantly—helping teams across IT, HR, finance, legal, and beyond automate work within one governed platform.

Companies including Fox, Live Nation, Notion, Ramp, and Lucid Motors run on Serval. Headquartered in San Francisco, we’ve raised $277 million from investors including Sequoia Capital, Redpoint Ventures, First Round, General Catalyst, and Elad Gil, most recently a $150 million Series C at a $3 billion valuation.

We’re building a team that moves quickly, takes ownership, and wants to make a meaningful impact on how the world’s largest organizations work. Come help us build what’s next for enterprise service management.

ROLE OVERVIEW

As Infrastructure Security Lead, you'll build and scale the foundations of how Serval secures its cloud, compute, and platform infrastructure. You will set the strategy and drive execution for securing our AWS environments, Kubernetes clusters, container runtimes, and the production systems our customers trust us to operate in; making security a property of the infrastructure itself rather than a control bolted on afterward.

You'll be a hands-on leader with deep technical credibility and strong engineering instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that secure-by-default infrastructure, least-privilege access, and strong isolation boundaries are designed into the systems that power Serval.

WHAT YOU'LL DO

- Design, implement, and operate Serval's infrastructure security program across cloud (AWS), Kubernetes, container runtimes, networking, and CI/CD, including hardening, configuration baselines, workload isolation, and continuous posture management.

- Own cloud and identity security, driving least-privilege IAM, secrets management, key management, network segmentation, and the guardrails that keep our multi-tenant production environment safe at scale.

- Secure the container and orchestration stack end-to-end. Image provenance and supply-chain integrity, registry and admission controls, runtime sandboxing and isolation, and Kubernetes hardening (RBAC, network policies, pod security), with particular attention to the isolated workers that execute customer workflows.

- Build, lead, and directly mentor a team spanning cloud security, platform/Kubernetes security, and infrastructure vulnerability management, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow.

- Drive infrastructure vulnerability management and remediation, partnering with engineering to identify, prioritize, and durably close exposure across cloud configuration, dependencies, base images, and the software supply chain.