AI Security Engineer — Protect Frontier Materials & IP

CuspAI; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Equity in CuspAI

28 days holiday (DE, NL, UK)

Parental leave

Professional development budget

Meaningful impact on materials science

Interdisciplinary teamwork

Job summary

CuspAI in Amsterdam is seeking a Security Engineer to build automated security pipelines and guardrails for our frontier AI platform. You’ll help shift security left, protect model weights, datasets, and IP while enabling rapid experimentation.

You will integrate CI/CD guardrails, IaC policies, container security, IAM controls, and incident response. This is a hands-on, cross‑functional role with researchers, chemists, and engineers to harden our environment without slowing scientific progress.

Qualifications

• 3+ years of experience in a DevSecOps, Cloud Security, or Site Reliability Engineering role, preferably in a fast-paced startup or AI-centric company.
• Proven experience building and securing CI/CD pipelines (e.g. GitHub Actions, GitLab CI, or Jenkins).
• Strong proficiency in Infrastructure as Code (e.g. Terraform, Pulumi) and securing cloud environments (AWS, GCP, or Azure).
• Deep understanding of container security and orchestration (Docker, Kubernetes).
• Practical knowledge of security frameworks and how to implement them without slowing down development cycles.

Responsibilities

• Secure the end-to-end ML lifecycle, implementing defenses against data poisoning and protecting proprietary model weights from theft.
• Design and deploy prompt injection defenses and runtime firewalls to prevent unauthorized manipulation of LLM interfaces.
• Implement AI Security Posture Management (AI-SPM) to monitor and catalog self-hosted models, internal training datasets, and proprietary endpoints.
• Weave automated security guardrails directly into CI/CD workflows, including secret scanning, API exposure checks, and software composition analysis (SCA).
• Codify security policies using Infrastructure as Code (IaC), ensuring cloud resources are compliant with global standards (GDPR, SOC2).
• Manage secrets and vulnerability patching for containerized environments to ensure research environment resilience.
• Design strict, least-privilege IAM controls to isolate sensitive training data and research workloads.
• Lead incident response efforts by monitoring production logs for anomalies and collaborating with AI Researchers to deploy rapid fixes.
• Empower the engineering team with security tools for local IDE scanning and pre-commit hooks.

Skills

DevSecOps

CI/CD pipelines

Infrastructure as Code

Cloud security

Container security

Security frameworks

Education

Bachelor's degree in Computer Science or related field

Tools

GitHub Actions

GitLab CI

Jenkins

Terraform

Pulumi

Docker

Kubernetes

Job description

CuspAI in Amsterdam is seeking a Security Engineer to build automated security pipelines and guardrails for our frontier AI platform. You’ll help shift security left, protect model weights, datasets, and IP while enabling rapid experimentation.

You will integrate CI/CD guardrails, IaC policies, container security, IAM controls, and incident response. This is a hands-on, cross‑functional role with researchers, chemists, and engineers to harden our environment without slowing scientific progress.