Security Engineer (Research Infrastructure)

Resolution•Berkeley, CA

1d•$208,000 - $930,000

About The Position

Resolution is hiring a Security Engineer focused on research infrastructure security. The role is responsible for protecting sensitive frontier-relevant research and enabling partnerships with AI labs by making research systems secure by default. You will serve as the security architect for the research pipeline, working with engineering, security, and operations teams and reporting to senior leadership. Although the role primarily focuses on technical research infrastructure security, initial responsibilities may span corporate IT and security as well. You will secure research across multiple cloud environments, including CI/CD pipelines, automated research agents, large-scale compute, and code, data, and model-weight handling. The work includes building security guardrails and automated verification into development workflows, enforcing security configurations as code, strengthening software supply-chain integrity, and isolating research agents with least-privilege access. You will also establish consistent network segmentation and identity management across cloud providers, develop protocols for sensitive research data, and help AI labs assess Resolution’s security practices. The goal is to protect research from data leakage, supply-chain compromise, IP theft, and other sophisticated threats while allowing researchers to work quickly. The position is based in Berkeley, California, with remote work considered in exceptional cases. The start date is ASAP. The hiring round is temporarily paused, but applications may still be submitted and candidates will be contacted when the process resumes.

Requirements

A bachelor's degree in a field relevant to the role, or an equivalent combination of education, training, and/or professional experience demonstrating comparable knowledge.
Seasoned security engineering experience, including writing code.
Deep experience with Terraform, Kubernetes, and CI/CD tools such as GitHub Actions or GitLab CI.
Experience managing security across multiple cloud providers, such as AWS, GCP, and neoclouds.
Understanding of securing ephemeral, high-compute research clusters.
A pragmatic understanding of modern software supply chains and the risks of AI-driven development, with the ability to mitigate risks without unduly reducing velocity.
Understanding of threats to high-value targets, including state-level actors and intellectual property theft, and ability to build systems robust against sophisticated adversaries.
Ability to explain complex security trade-offs to researchers and scientists and find safe ways to enable their work.
Willingness to use AI tools extensively in one's workflow while taking appropriate care.
Motivation to contribute full-time to the alignment of artificial superintelligence.

Responsibilities

Build security guardrails into CI/CD pipelines so manual and agent-driven deployments are scanned, verified, and compliant.
Establish workflows that allow research agents to test code and infrastructure changes against security policies before production deployment.
Lead implementation of Compliance as Code and automate auditing and enforcement of security configurations across AWS, GCP, and neocloud environments.
Establish provenance and integrity systems for code and dependencies, including signing, SBOM generation, and automated vulnerability management.
Define and enforce security models for research agents, applying least-privilege access and isolating them from sensitive intellectual property and credentials.
Manage security architecture for high-compute research environments, including zero-trust network segmentation and identity management across cloud providers.
Develop and maintain data-handling protocols for pre-publication research and potentially sensitive model weights.
Partner with AI labs on security audits and help meet frontier model providers’ security requirements.
Work with engineering, security, and operations teams to secure the technical side of the organization.