MTS: Security Engineering for AI Infra & Zero-Trust

Applied Methods Ltd; Northern, New York (KY, NY); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Top-tier compensation

Stock options

Health, dental, vision, life insurance

Meals provided in office

Parental leave (22 weeks)

Unlimited PTO in US

Visa sponsorship

Team off-sites

Job summary

Reflection is a research lab building open AI foundations and models. We seek a mid-level Security Engineering Tech Lead to architect and operate the security stack across corporate, multi-cloud research infra, and GPU training capacity.

You will lead end-to-end security from end-user compute to cloud and container security, driving just-in-time access, IaC, and detection at scale. You will engage across engineering, legal, and physical security, guiding audit readiness and vendor risk while

Qualifications

• 7+ years of deep engineering experience at high-valuation companies or defense-grade environments.
• Experience leading SOC 2, ISO 27001, FedRAMP, and enterprise security reviews.
• Experience with vendor risk, procurement security reviews, and legal contract negotiations.

Responsibilities

• Architect cloud-native security controls across multi-cloud environments and GPU clusters.
• Establish IAM governance, network segmentation, and isolation boundaries at scale.
• Implement zero-trust access with hardware-backed authentication and just-in-time authorization.
• Declare infrastructure in code (Terraform/Pulumi) and enforce automated compliance checks.
• Develop telemetry pipelines for high-fidelity security detection and response.

Skills

Linux internals

macOS internals

GPU security

Cloud security

Kubernetes security

Zero-trust architecture

Threat detection

Security automation

CI/CD security

Audits & compliance

Tools

Terraform

Pulumi

Job description

Reflection is a research lab building open AI foundations and models. We seek a mid-level Security Engineering Tech Lead to architect and operate the security stack across corporate, multi-cloud research infra, and GPU training capacity.

You will lead end-to-end security from end-user compute to cloud and container security, driving just-in-time access, IaC, and detection at scale. You will engage across engineering, legal, and physical security, guiding audit readiness and vendor risk while