AI Security Engineer – CI/CD, Cloud & IAM | Equity

Cuspai; Cambridge; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Equity in the company

28 days holiday (DE, NL, UK)

Professional development budget

Sustainable impact through AI & data

Job summary

Cuspai is seeking a Security Engineer to build automated security pipelines and AI-specific guardrails for our frontier materials discovery platform. You will help secure the end-to-end ML lifecycle, protect proprietary models, and implement shielded CI/CD processes in a fast-moving startup environment.

You will work across AI researchers, chemists, and engineers to embed security into product features, foster a shift-left security mindset, and ensure scalable, compliant security practices as we

Qualifications

• 3+ years of experience in a DevSecOps, Cloud Security, or Site Reliability Engineering role, preferably within a fast-paced startup or AI-centric company.
• Proven experience building and securing CI/CD pipelines (e.g. GitHub Actions, GitLab CI, or Jenkins).
• Strong proficiency in Infrastructure as Code (e.g. Terraform, Pulumi) and securing cloud environments (AWS, GCP, or Azure).
• Deep understanding of container security and orchestration (Docker, Kubernetes).
• Practical knowledge of security frameworks and how to implement them without slowing down development cycles.

Responsibilities

• AI-Specific Security & IP Protection: Secure the end-to-end ML lifecycle, implementing defenses against data poisoning and protecting proprietary model weights from theft.
• Design and deploy prompt injection defenses and runtime firewalls to prevent unauthorized manipulation of LLM interfaces.
• Implement AI Security Posture Management to monitor and catalog self-hosted models, training datasets, and proprietary endpoints.
• Cloud Security, CI/CD & Core DevSecOps: Weave automated security guardrails into CI/CD workflows, including secret scanning and software composition analysis.
• Codify security policies using IaC, ensuring cloud resources comply with GDPR, SOC2, etc.
• Manage secrets and patching for Docker/Kubernetes to keep research environments resilient.
• Identity and Access Management controls to isolate sensitive training data and workloads.
• Interdisciplinary Collaboration & Security Culture: Lead incident response, empower engineers with security tooling, and foster shared responsibility across AI, chemistry, and engineering teams.

Skills

DevSecOps

CI/CD pipelines

Infrastructure as Code

Cloud security

Container security

Security frameworks

Tools

GitHub Actions

GitLab CI

Jenkins

Terraform

Pulumi

Docker

Kubernetes

Job description

Cuspai is seeking a Security Engineer to build automated security pipelines and AI-specific guardrails for our frontier materials discovery platform. You will help secure the end-to-end ML lifecycle, protect proprietary models, and implement shielded CI/CD processes in a fast-moving startup environment.

You will work across AI researchers, chemists, and engineers to embed security into product features, foster a shift-left security mindset, and ensure scalable, compliant security practices as we