← All roles

MTS, Technology & Security Engineering

Reflection· Security
Apply on company site
New York, NY, San Francisco, CAFull-timePosted 4w ago

About the role

Senior-level security engineering leader responsible for architecting and operating the security foundation across corporate, multi-cloud research infrastructure, and GPU training capacity within a frontier AI company.

Responsibilities

  • - Design and manage a highly resilient corporate device fleet spanning Linux, macOS, Windows and NVIDIA GPU workstations.
  • - Shift the fleet toward intelligent posture verification and cryptographic device binding while maintaining researcher workflows.
  • - Secure diverse local toolchains and developer environments without breaking workflows.
  • - Architect cloud-native security controls across multi-cloud environments with multi-million-dollar GPU clusters.
  • - Establish IAM governance, network segmentation, and isolation boundaries for training infrastructure and model assets.
  • - Partner with infrastructure and research teams to scale security controls with GPU capacity.
  • - Implement continuous, context-aware authorization using modern mesh networks and proxies (e.g., Tailscale, Cloudflare One).
  • - Enforce hardware-backed authentication (WebAuthn/FIDO2) across corporate and production planes.
  • - Eliminate standing and persistent access in favor of just-in-time, verifiable authorization.
  • - Ensure 100% of infrastructure, endpoint configurations, IAM policies, and cloud environments are declared in code (Terraform/Pulumi).
  • - Eliminate configuration drift via automated CI/CD validation and continuous compliance checks.
  • - Build repeatable, auditable deployment pipelines for provable security posture.
  • - Build telemetry pipelines for high-fidelity logs to support detection at scale.
  • - Detect post-exploitation techniques, lateral movement, and living-off-the-land attacks.
  • - Tune detection coverage under an assumed-breach model for rapid detection and containment.
  • - Support SOC 2, ISO 27001, FedRAMP, ISO 22237, ISO 22301, NIST CSF, customer audits, and enterprise security reviews.
  • - Lead vendor risk assessments, procurement security reviews, and security-related legal contract negotiations.
  • - Own front-line defenses including physical security and data center security operations.

Qualifications

  • - 7+ years of deep engineering experience at high-valuation companies or defense-grade environments.
  • - Track record of building and operating security engineering functions at scale.
  • - Experience supporting SOC 2, ISO 27001, FedRAMP, ISO 22237, ISO 22301, NIST CSF, customer audits, and enterprise security reviews.
  • - Experience leading vendor risk, procurement security reviews, and legal contract negotiations.
  • - Experience with front-line defenses for an AI company, including physical security and data center security operations.
  • - Deep familiarity with Linux and macOS internals and securing NVIDIA GPUs without breaking developer environments.
  • - Expert-level knowledge of public cloud architectures, IAM governance at scale, Kubernetes/container isolation.
  • - Understanding of cloud/infrastructure security, Kubernetes/container security, zero-trust, security operations at scale, IAM, detection/response, and security automation.
  • - Ability to operate as both executive leader and hands-on builder.

Skills

Required:Linux and macOS internalsPublic cloud architectures and IAM at scaleKubernetes and container security

Benefits

  • - Top-tier compensation: Salary and equity.
  • - Stock options for all contributors.
  • - Comprehensive health benefits: medical, dental, vision, life, wellness allowance.
  • - Meals: Lunch and dinner in the office.
  • - 22 weeks paid parental leave for new birthing and non-birthing parents (including adoptive/surrogate journeys).
  • - Unlimited PTO in the U.S. and 30 days in the U.K.
  • - Sponsorship for visas and immigration pathways where applicable.
  • - Regular team off-sites, happy hours, and celebrations.
Last updated Oct 1, 2026. Interested? Apply on the company site.

About Reflection

Building frontier open intelligence

Building frontier open intelligence.

liquid-ai-recruiting-target
Company profileWebsite

More open roles at Reflection