Security Engineer Research Infrastructure

You will design security for the research pipeline across multiple cloud environments. You will harden CI/CD pipelines, automate security verification, and implement compliance as code. You will secure software supply chains, agent sandboxes, high-compute environments, network segmentation, identity management, and research data handling. You will also support security audits with frontier model providers.

Responsibilities

• Build security guardrails into CI/CD pipelines
• Establish automated verification workflows for code and infrastructure changes
• Implement compliance as code across AWS, GCP, and neocloud environments
• Build code and dependency provenance, signing, SBOM generation, and vulnerability management systems
• Define and enforce least-privilege security models for research agents
• Manage multi-cloud compute security, network segmentation, and identity management
• Develop research data-handling protocols
• Support security audits with AI labs

Requirements

• Security engineering experience with Terraform, Kubernetes, and CI/CD tools
• Multi-cloud security experience across AWS, GCP, and neoclouds
• Knowledge of software supply-chain security
• Knowledge of AI-driven development security risks
• Security threat-modeling expertise
• Ability to explain security trade-offs to researchers and scientists
• Ability to use AI tools carefully in the workflow
• Motivation to work on artificial superintelligence alignment full-time

Benefits

• 5 weeks of paid vacation in addition to public holidays
• Comprehensive medical, dental, and vision insurance
• Unlimited sick leave
• Unconditional 401(k) contribution equal to 4% of salary
• Visa sponsorship for relocation to Berkeley