Security Engineer (Research Infrastructure)

Resolution•Berkeley, CA

14h•Remote

About The Position

Resolution is conducting research on aligning artificial superintelligence (ASI). This role is crucial for protecting this sensitive research and enabling deeper partnerships with AI labs. The focus is on research and infrastructure security, specifically securing the CI/CD pipelines, automated research agents, multi-cloud compute, and the handling of code, data, and model weights. While the role initially may span both research infrastructure security and corporate IT security, the primary focus is on the technical aspects of the organization's security. The position reports to senior leadership and involves close collaboration with security, engineering, and operations teams. The goal is to build a hardened environment that allows researchers and agents to iterate quickly without compromising data, the supply chain, or other security aspects.

Requirements

Seasoned security engineer who writes code.
Deep experience in Terraform, Kubernetes, and CI/CD tools (GitHub Actions, GitLab CI).
Experience managing security across multiple cloud providers (AWS / GCP / neoclouds).
Understanding of securing ephemeral, high-compute research clusters.
Pragmatic approach to modern software supply chains.
Understanding of unique risks of AI-driven development and how to mitigate them without sacrificing velocity.
Understanding of the threat model for high-value targets (state-level actors, IP theft) and ability to build robust systems against sophisticated adversaries.
Ability to explain complex security trade-offs to researchers and scientists.
Willingness to use AI tools aggressively in workflow with appropriate care.
Motivation by the alignment of artificial superintelligence (ASI) and desire to contribute full-time.
A bachelor's degree in a field relevant to the role, or an equivalent combination of education, training, and/or professional experience that demonstrates comparable knowledge.

Responsibilities

Build security guardrails directly into CI/CD pipelines to ensure all deployments are automatically scanned, verified, and compliant.
Establish workflows for automated verification where agents can test their own code and infrastructure changes against security policies before production deployment.
Lead the implementation of "Compliance as Code" to automate the auditing and enforcement of security configurations across AWS, GCP, and neocloud environments.
Build systems to ensure the provenance and integrity of code and dependencies, especially in an environment relying on automated coding agents.
Implement robust signing, SBOM generation, and automated vulnerability management for the software supply chain.
Define and enforce security models for research agents, ensuring they have least privilege access and are isolated from sensitive IP and credentials.
Manage the security architecture for high-compute research environments operating in a multi-cloud ecosystem, ensuring consistent, zero-trust network segmentation and identity management.
Develop and maintain data handling protocols for pre-publication research and sensitive model weights.
Partner with AI labs to navigate security audits and bridge the gap between a fast-paced research culture and the high-security requirements of frontier model providers, using compliance as an accelerator.