Member of Technical Staff – Security Engineering

About the role

As a Member of Technical Staff in Security Engineering, you will safeguard the research environment, proprietary model weights, and the massive infrastructure that powers our Large Physics foundation model. You will work closely with infrastructure, research, and forward‑deployed teams to keep our high‑velocity AI development pipeline secure.

Key responsibilities

• Architect secure network perimeters, private data transmission channels (PrivateLink, VPN) and isolated storage for petabyte‑scale data.
• Design zero‑trust boundaries, encrypted storage, and secure execution environments to protect model IP and weights during training and serving.
• Secure data ingestion pipelines against tampering and data‑poisoning; defend against AI‑specific threats such as adversarial inputs and model extraction attacks.
• Own enterprise identity federation (SAML 2.0, OIDC with Okta/Entra ID) and machine‑to‑machine authentication (mTLS); implement immutable audit logging and cryptographic erasure.
• Integrate automated security testing, threat detection, and vulnerability scanning into CI/CD workflows, Kubernetes and Slurm orchestrators, and customer‑facing APIs.

Required profile

• Proven hands‑on experience building and securing production systems in cloud environments (AWS, GCP, or Azure) or large‑scale distributed systems.
• Strong background in security engineering, zero‑trust architecture, and compliance frameworks (SOC 2, FedRAMP).
• Ability to work in a fast‑paced research environment while maintaining high security standards.

Required skills

• AWS, GCP, or Azure cloud platforms
• PrivateLink, VPN, KMS, BYOK
• SAML 2.0, OIDC, Okta, Entra ID
• mTLS, immutable audit logging
• Kubernetes, Slurm orchestration