← All roles

MTS Lead, Technology & Security Engineering

Reflection· Security
Apply on company site
New York, NY, San Francisco, CA$0 + equityFull-timePosted 3mo ago

About the role

Lead the architecture and operation of Reflection's security engineering foundation across corporate, multi-cloud research infrastructure, and GPU training capacity, owning the full security stack from end-user compute to security-as-code and detection engineering.

Responsibilities

  • Design and manage a highly resilient corporate device fleet spanning Linux, macOS, Windows and specialized hardware (NVIDIA GPU workstations)
  • Shift the fleet toward intelligent posture verification and cryptographic device binding while preserving workflows
  • Secure diverse local toolchains and developer environments without breaking researcher workflows
  • Architect cloud-native security controls across multi-cloud environments.
  • Establish IAM governance, network segmentation, and isolation boundaries for training infrastructure and model assets
  • Partner with infrastructure and research teams to scale security controls with GPU capacity
  • Implement continuous, context-aware authorization using modern mesh networks and proxies (e.g., Tailscale, Cloudflare One)
  • Enforce hardware-backed authentication (WebAuthn/FIDO2) across corporate and production planes
  • Eliminate standing and persistent access in favor of just-in-time, verifiable authorization
  • Ensure 100% infrastructure, endpoint configurations, IAM policies, and cloud environments are declared in code (Terraform/Pulumi)
  • Eliminate configuration drift via automated CI/CD validation and continuous compliance checks
  • Build repeatable, auditable deployment pipelines that prove security posture
  • Build telemetry pipelines to ingest high-fidelity logs into a cloud-native data lake for detection at scale
  • Detect post-exploitation techniques, lateral movement, and living-off-the-land attacks
  • Tune detection coverage against an assumed-breach threat model with rapid time-to-detect and containment
  • Support SOC 2, ISO 27001, FedRAMP, ISO 22237, ISO 22301, NIST CSF, customer audits, and enterprise security reviews
  • Lead vendor risk assessments, procurement security reviews, and security-related legal contract negotiations
  • Own front-line defenses including physical and data center security operations

Qualifications

  • 20+ years of deep engineering experience at high-valuation companies or defense-grade environments
  • Track record of building and operating security engineering functions at scale
  • Experience supporting SOC 2, ISO 27001, FedRAMP, ISO 22237, ISO 22301, NIST CSF, customer audits, and enterprise security reviews
  • Experience leading vendor risk, procurement security reviews, and legal contract negotiations
  • Experience with front-line defenses for an AI company, including physical security and data center security operations
  • Deep familiarity with Linux and macOS internals, including securing NVIDIA GPUs without breaking developer environments
  • Expert-level knowledge of public cloud architectures, IAM governance at scale, and Kubernetes/container isolation primitives
  • Understanding of cloud and infrastructure security, Kubernetes/container security, zero-trust architectures, security operations at scale, IAM, detection/response technologies, and security automation

Skills

Required:End-user compute securityCloud security and IAM at scaleSecurity automation and SaCSecurity operations at scale
Nice to have:Vendor risk and legal contract negotiations

Benefits

  • Top-tier compensation: Salary and equity
  • Stock options
  • Health & wellness: medical, dental, vision, life, wellness allowance
  • Meals: Lunch and dinner in office
  • Life & family: 22 weeks paid parental leave
  • Vacation: Unlimited PTO in the U.S. and 30 days in the U.K
  • Sponsorship support: visa sponsorship and immigration pathways
  • Team building: regular off-sites, happy hours, and team celebrations
Last updated Oct 1, 2026. Interested? Apply on the company site.

About Reflection

Building frontier open intelligence

Building frontier open intelligence.

liquid-ai-recruiting-target

More open roles at Reflection