Security Architect: Research Infra & Multi-Cloud

Ai Safety; Berkeley (CA); Híbrido; USD 250.000 - 340.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Catered lunches and dinners

Paid work trips and conferences

Flexible PTO for Berkeley-based staff

Hybrid work flexibility

Professional development support

Descripción de la vacante

MATS is seeking a Cybersecurity Engineer for Research Infrastructure to design and secure our compute cluster, CI/CD, and cloud environments. You will implement zero-trust, supply-chain security, and sandboxing for research workloads to enable fast, safe experimentation.

You will work with DevSecOps and HPC teams to define policies-as-code, manage multi-cloud security, and protect data and model weights from leakage or exfiltration, while supporting researchers and partners.

Formación

• Deep Linux systems-security experience on multi-user/HPC infra, with Terraform and CI/CD IaC.
• Experience securing cloud-native environments (AWS, GCP, neocloud).
• Hands-on with HPC schedulers (SLURM); Kubernetes is a plus.
• Threat-modeling against sophisticated adversaries and building robust systems.

Responsabilidades

• Harden DevSecOps and CI/CD pipelines with security guardrails and compliance-as-code.
• Secure the software supply chain with signing, SBOMs, and vulnerability management.
• Define agent sandboxing and least-privilege execution across the cluster.
• Own multi-cloud and cluster security, including zero-trust and RBAC across providers.
• Harden the research cluster OS, kernel patching, and host isolation.
• Protect research data, models, and data-handling protocols.
• Monitor logs, SIEM ingestion, and detect anomalous activity.
• Enable frontier research by aligning security with rapid experimentation.
• Own incident response for compute clusters and artefacts.

Conocimientos

Deep Linux security

Terraform

CI/CD

Cloud security

HPC/SLURM

Threat modelling

Software supply-chain security

Zero-trust networking

IaC security

Incident response

Herramientas

GitHub Actions

GitLab CI

Snyk

Trivy

Sigstore

cosign

SBOM tooling

Descripción del empleo

MATS is seeking a Cybersecurity Engineer for Research Infrastructure to design and secure our compute cluster, CI/CD, and cloud environments. You will implement zero-trust, supply-chain security, and sandboxing for research workloads to enable fast, safe experimentation.

You will work with DevSecOps and HPC teams to define policies-as-code, manage multi-cloud security, and protect data and model weights from leakage or exfiltration, while supporting researchers and partners.