Security Engineer (Research Infrastructure)

Resolution is hiring a Security Engineer to secure its research infrastructure and pipeline across multiple cloud environments. The role partners with engineering and research teams to build secure CI/CD and compute systems, protect research data and supply chains, and support security audits with AI labs.

Responsibilities:

• Build security guardrails directly into our CI/CD pipelines. Ensure that every deployment, whether manual or agent-driven, is automatically scanned, verified, and compliant
• Establish workflows where our agents can test their own code and infrastructure changes against security policies before deploying to production environments
• Lead the implementation of "Compliance as Code." Automate the auditing and enforcement of security configurations across our AWS, GCP & neocloud footprints
• In an environment where we rely heavily on automated coding agents, build systems to ensure the provenance of code and dependencies. Implement robust signing, SBOM (Software Bill of Materials) generation, and automated vulnerability management
• Define and enforce security models for our research agents. Ensure that agents have the "least privilege" access required to execute experiments while remaining isolated from sensitive IP and credentials
• Manage the security architecture for our high-compute research environments. We operate in a multi-cloud ecosystem; you will be responsible for consistent, zero-trust network segmentation and identity management across disparate cloud providers
• Develop and maintain the data handling protocols necessary for working with pre-publication research and potentially sensitive model weights
• Partner with AI labs to navigate security audits. You will bridge the gap between our "move fast" research culture and the high-bar security requirements of frontier model providers, turning compliance into an accelerator for our research agenda

Requirements:

• Are a seasoned security engineer who writes code, with deep experience in Terraform, Kubernetes, and CI/CD tools (GitHub Actions, GitLab CI)
• Have managed security across multiple cloud providers (AWS / GCP / neoclouds) and understand the nuance of securing ephemeral, high-compute research clusters
• Take a pragmatic approach to modern software supply chains and understand the unique risks of AI-driven development and how to mitigate them without killing velocity
• Understand the threat model of a high-value target for state-level actors and IP theft, and can build systems robust against sophisticated adversaries
• Can explain complex security trade-offs to lead researchers and scientists, saying "yes, safely" rather than just "no."
• Are willing to use AI tools aggressively in your own workflow, with appropriate care to not get fooled!
• Are motivated by alignment of artificial superintelligence (ASI) and want to contribute to it full-time
• A bachelor's degree in a field relevant to the role, or an equivalent combination of education, training, and/or professional experience that demonstrates comparable knowledge