Security Engineer

Cuspai; Cambridge; Presencial; GBP 90.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity in the company

28 days holiday (DE, NL, UK)

Professional development budget

Sustainable impact through AI & data

Descripción de la vacante

Cuspai is seeking a Security Engineer to build automated security pipelines and AI-specific guardrails for our frontier materials discovery platform. You will help secure the end-to-end ML lifecycle, protect proprietary models, and implement shielded CI/CD processes in a fast-moving startup environment.

You will work across AI researchers, chemists, and engineers to embed security into product features, foster a shift-left security mindset, and ensure scalable, compliant security practices as we

Formación

• 3+ years of experience in a DevSecOps, Cloud Security, or Site Reliability Engineering role, preferably within a fast-paced startup or AI-centric company.
• Proven experience building and securing CI/CD pipelines (e.g. GitHub Actions, GitLab CI, or Jenkins).
• Strong proficiency in Infrastructure as Code (e.g. Terraform, Pulumi) and securing cloud environments (AWS, GCP, or Azure).
• Deep understanding of container security and orchestration (Docker, Kubernetes).
• Practical knowledge of security frameworks and how to implement them without slowing down development cycles.

Responsabilidades

• AI-Specific Security & IP Protection: Secure the end-to-end ML lifecycle, implementing defenses against data poisoning and protecting proprietary model weights from theft.
• Design and deploy prompt injection defenses and runtime firewalls to prevent unauthorized manipulation of LLM interfaces.
• Implement AI Security Posture Management to monitor and catalog self-hosted models, training datasets, and proprietary endpoints.
• Cloud Security, CI/CD & Core DevSecOps: Weave automated security guardrails into CI/CD workflows, including secret scanning and software composition analysis.
• Codify security policies using IaC, ensuring cloud resources comply with GDPR, SOC2, etc.
• Manage secrets and patching for Docker/Kubernetes to keep research environments resilient.
• Identity and Access Management controls to isolate sensitive training data and workloads.
• Interdisciplinary Collaboration & Security Culture: Lead incident response, empower engineers with security tooling, and foster shared responsibility across AI, chemistry, and engineering teams.

Conocimientos

DevSecOps

CI/CD pipelines

Infrastructure as Code

Cloud security

Container security

Security frameworks

Herramientas

GitHub Actions

GitLab CI

Jenkins

Terraform

Pulumi

Docker

Kubernetes

Descripción del empleo

About the company the company is the frontier AI company on a mission to solve the breakthrough materials needed to power human progress. While nature took billions of years to perfect molecules, we are harnessing AI to unlock trillion-dollar materials breakthroughs in months, not millennia. Our founding team is the most cited in the world, comprised of world-class researchers in AI, chemistry and engineering.

We are working on some of the hardest and most important challenges including energy, clean water, the future of compute, and carbon capture, and this is just the start of what our 'search engine' for next-generation materials will unlock.

We invite you to be part of a diverse, innovative team at the intersection of AI and materials science, working to create impactful partnerships that drive innovation, scalability, and industry collaboration. This work matters. Your work matters.

We’re on the cusp of the on-demand materials era. Join us.

The RoleDue to our rapid growth and the sensitivity of our proprietary materials discovery platform, we are seeking a Security Engineer to ensure our innovation happens at speed without compromising the safety of our IP or our users.

Your ImpactIn this role you will be building the automated security pipelines and AI-specific guardrails that protect our frontier models and research data, which is critical for maintaining the integrity of our materials discovery engine and the trust of our global partners.

As an early security hire, you won't be a manual blocker; instead, you will architect a "shift-left" culture where security is a fundamental product feature. Your work ensures that as we scale our search for next-generation materials, our underlying infrastructure and world-class IP remain safely locked down.

What You Will DoAI-Specific Security & IP Protection

• Secure the end-to-end ML lifecycle, implementing defenses against data poisoning and protecting our proprietary model weights from theft.

• Design and deploy prompt injection defenses and runtime firewalls to prevent unauthorized manipulation of our LLM interfaces.

• Implement AI Security Posture Management (AI-SPM) to monitor and catalog self-hosted models, internal training datasets, and proprietary endpoints.

Cloud Security, CI/CD & Core DevSecOps

• Weave automated security “guardrails” directly into our CI/CD workflows, including secret scanning, API exposure checks, and software composition analysis (SCA).

• Codify security policies using Infrastructure as Code (IaC), ensuring all cloud resources are automatically compliant with global standards (e.g. GDPR, SOC2).

• Manage secrets and vulnerability patching for containerized environments (e.g. Docker, Kubernetes) to ensure our research environment is resilient.

• Design strict, least-privilege Identity and Access Management (IAM) controls to isolate sensitive training data and research workloads.

Interdisciplinary Collaboration & Security Culture

• Lead incident response efforts by monitoring production logs for anomalies and collaborating with AI Researchers to deploy rapid fixes.

• Empower the engineering team to own security by providing tools for local IDE security scanning and pre-commit hooks.

• Act as a security educator, cultivating a culture of shared responsibility across the AI, chemistry, and engineering teams.

• Partner with researchers, chemists, and engineers to translate security requirements into practical workflows that support rather than slow down scientific work.

Must Have Skills and Qualifications: You are motivated by the mission of using AI for planetary-scale impact and understand the high stakes of securing "deep tech" intellectual property.

• 3+ years of experience in a DevSecOps, Cloud Security, or Site Reliability Engineering role, preferably within a fast-paced startup or AI-centric company.

• Proven experience building and securing CI/CD pipelines (e.g. GitHub Actions, GitLab CI, or Jenkins).

• Strong proficiency in Infrastructure as Code (e.g. Terraform, Pulumi) and securing cloud environments (AWS, GCP, or Azure).

• Deep understanding of container security and orchestration (Docker, Kubernetes).

• Practical knowledge of security frameworks and how to implement them without slowing down development cycles.

Bonus Points (But Not Critical): Direct experience with AI-specific security tools or defending against LLM-specific vulnerabilities (OWASP Top 10 for LLMs).

• Experience with AI Security Posture Management (AI-SPM) tools.

• Relevant certifications such as AWS Certified Security, CSEP, or OSCP.

• A background or personal interest in materials science, chemistry, or the intersection of AI and physical sciences.

Additional ConsiderationsThis role could be based in our Cambridge, London, Amsterdam or Berlin offices, with the expectation of being in the office three days per week. Additionally, there may be regular travel required to other locations for collaboration and project work.

As part of your onboarding, you will be expected to spend at least a few weeks in our Cambridge/London office learning about our platform and getting to know us in person.

Additionally, there may be regular travel required to Europe and other regional and global locations for collaboration and project work.

What We Offer

A competitive salary: We value and reward impact and growth

• Equity in the company: You have a stake in the success of the company

• Time off to stay fresh: 28 days holiday (DE, NL, UK) or 21 days holiday (JP, SG, US), in addition to local public holidays

• ‘Gold Standard’ parental leave: 26 weeks (primary caregiver) and 12 weeks (secondary caregiver) at full pay - we look after you and your family while we work on the most important materials discovery problems together

• Professional development budget: We invest in your career development so you can stay up to date with the latest industry knowledge or add to your skills to increase impact and growth

• Solve meaningful problems: See how your work has a direct impact on advancing materials science and solving sustainability and climate-related problems through the creation and application of bleeding-edge SOTA technology and revolutionary techniques

• True interdisciplinary teamwork: Be part of a deeply collaborative environment bridging AI research, computational chemistry, and experimental science - work with world-class researchers and engineers who enjoy sharing knowledge and supporting each other

Join us in shaping the future of materials with AI. Together, we can create groundbreaking solutions for a more sustainable world.

the company is an equal opportunities employer committed to building a diverse and inclusive workplace. We do not discriminate on the basis of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy or related condition (including breastfeeding), veteran status, or any other basis protected by applicable law.

We actively encourage applications from all backgrounds and value the unique perspectives and contributions that diversity brings to our team.

Please let us know if you require any specific adjustments during or after the interview process. We will do everything we can within reason to accommodate.