Security Engineer (Research Infrastructure)

Sequent; Berkeley (CA); On-site; USD 346,000 - 930,000; Full time

Benefits offered by this job

5 weeks of paid vacation per year

Comprehensive healthcare insurance (m‑

Unlimited sick leave

401(k) matching 4%

Job summary

Resolution seeks an experienced security engineer to architect secure research pipelines across multi‑cloud environments, focusing on DevSecOps, supply‑chain integrity, and data protection. You’ll partner with engineering to harden CI/CD, automate verification, and enforce compliant configurations while safeguarding research assets and AI model weights.

The role reports to leadership, collaborates with security and operations teams, and supports a frontier research program that requires

Qualifications

• Seasoned security engineer who writes code and has deep experience in Terraform, Kubernetes, and CI/CD tools.
• Managed security across multiple cloud providers (AWS / GCP / neoclouds) and understand securing episodic, high‑compute research clusters.
• Pragmatic approach to modern software supply chains and mitigates AI‑driven risks without killing velocity.
• Understands threat models for high‑value targets and can build robust systems against sophisticated adversaries.
• Able to explain complex security trade‑offs to researchers, saying yes, safely, when appropriate.
• Willing to use AI tools in workflow with appropriate safeguards.
• Motivated by alignment of ASI and ready to contribute full‑time.

Responsibilities

• Secure DevSecOps & CI/CD orchestration: harden pipelines, automate verification, enforce security configurations across multi‑cloud footprints.
• Supply chain security for automated research: provenance, SBOM generation, signing, vulnerability management; enforce least-privilege for agents.
• Multi‑cloud research infrastructure: manage zero‑trust network segmentation and identity across providers; protect research data.
• Enable frontier access: align security audits with frontier model providers and accelerate research via compliant processes.

Skills

Terraform

Kubernetes

CI/CD tools

GitHub Actions

GitLab CI

Education

Bachelor's degree

Tools

AWS

GCP

neocloud

CI/CD

Job description

About Resolution

Resolution does research on how to align artificial superintelligence (ASI). ASI may be developed in the next few years, but it is unclear whether alignment is on track to be ready in the same timeframe. We aim at higher a priori confidence in aligned outcomes by pursuing a portfolio of theory and empirics bets, any one of which — if it succeeds — would meaningfully advance the field. We invest heavily in research automation to accelerate progress, and we believe that stronger alignment theory unlocks higher automation: more principled approaches give us better filters for which directions of automated research are promising.

Resolution was founded in 2026 by researchers from UK AISI’s Alignment Team, who ran the £30m Alignment Project, and Timaeus, who pioneered applying singular learning theory to alignment.

For more information, see our announcement.

About the Team

Resolution's work will involve sensitive frontier-relevant research and partnerships with AI labs. This role exists both to protect that work and to enable it: good security is what makes deeper lab partnerships possible. We draw a distinction between two closely related areas of security:

• Research & infrastructure security. Securing how research actually runs: CI/CD pipelines, automated research agents, multi-cloud compute, and code/data/model-weight handling.

• Corporate IT & security. The endpoint, identity, and collaboration scaffolding a distributed research org runs on, in combination with the compliance frameworks that unlock lab partnerships.

This role focuses on the former, covering security on the technical side of the organization. You would report to senior leadership and work closely with our security and engineering teams (as well as with our operations team).

In practice, we expect to grow the security team one hire at a time, so your initial set of responsibilities is likely to span both areas. We expect the distinction to clarify over time.

About the Role

You are the security architect for our research pipeline. You'll define how we securely conduct research across multiple cloud environments, partnering closely with engineering to make CI/CD, automated research agents, and large-scale compute secure by default. You would build a hardened environment where researchers and agents iterate at speed without risking data leakage, supply-chain compromise, and other security failures.

Responsibilities

1. Secure DevSecOps & CI/CD Orchestration

• Pipeline Hardening: Build security guardrails directly into our CI/CD pipelines. Ensure that every deployment, whether manual or agent-driven, is automatically scanned, verified, and compliant.

• Automated Verification: Establish workflows where our agents can test their own code and infrastructure changes against security policies before deploying to production environments.

• Infrastructure as Code (IaC): Lead the implementation of "Compliance as Code." Automate the auditing and enforcement of security configurations across our AWS, GCP & neocloud footprints.

2. Supply Chain Security for Automated Research

• Provenance and Integrity: In an environment where we rely heavily on automated coding agents, build systems to ensure the provenance of code and dependencies. Implement robust signing, SBOM (Software Bill of Materials) generation, and automated vulnerability management.

• Agent Sandbox Security: Define and enforce security models for our research agents. Ensure that agents have the "least privilege" access required to execute experiments while remaining isolated from sensitive IP and credentials.

3. Multi-Cloud Research Infrastructure

• Compute Security: Manage the security architecture for our high‑compute research environments. We operate in a multi‑cloud ecosystem; you will be responsible for consistent, zero‑trust network segmentation and identity management across disparate cloud providers.

• Research Data Protection: Develop and maintain the data handling protocols necessary for working with pre‑publication research and potentially sensitive model weights.

4. Enabling Frontier Access

• Compliance as a Competitive Advantage: Partner with AI labs to navigate security audits. You will bridge the gap between our "move fast" research culture and the high‑bar security requirements of frontier model providers, turning compliance into an accelerator for our research agenda.

You May Be a Good Fit If You

• Are a seasoned security engineer who writes code, with deep experience in Terraform, Kubernetes, and CI/CD tools (GitHub Actions, GitLab CI).

• Have managed security across multiple cloud providers (AWS / GCP / neoclouds) and understand the nuance of securing episodic, high‑compute research clusters.

• Take a pragmatic approach to modern software supply chains and understand the unique risks of AI‑driven development and how to mitigate them without killing velocity.

• Understand the threat model of a high‑value target for state‑level actors and IP theft, and can build systems robust against sophisticated adversaries.

• Can explain complex security trade‑offs to lead researchers and scientists, saying "yes, safely" rather than just "no."

• Are willing to use AI tools aggressively in your own workflow, with appropriate care to not get fooled!

• Are motivated by alignment of artificial superintelligence (ASI) and want to contribute to it full‑time.

Why This Role is Unique

At this organization, "Corporate Security" is a separate function. This role is focused on the Research Infrastructure. You will be working at the frontier of how automated alignment research is actually done. You will be building the security primitives for a new way of doing science: one where humans and machines collaborate to solve the most important problem of the 21st century.

Logistics

Salary: Your salary depends on the scope, autonomy, and impact we expect you to have while working at Resolution. The expected range of in‑person salaries for this role is:

• L4 (SWE II): $346,000

• L5 (Senior SWE): $451,000

• L6 (Staff SWE): $670,000

• L7 (Senior Staff SWE): $930,000

We level using an internal adaptation of Google's standard levelling; the band above is indicative of where a strong candidate might come in.

Location: Berkeley, California. Remote may be considered in exceptional cases.

Benefits:

• 5 weeks of paid vacation per year, in addition to public holidays.

• Comprehensive healthcare insurance (medical, dental, vision).

• Unlimited sick leave to prioritize your well‑being.

• An unconditional 401(k) contribution equal to 4% of your salary.

Visa sponsorship: We can sponsor visas for relocation to Berkeley.

Minimum education: A bachelor's degree in a field relevant to the role, or an equivalent combination of education, training, and/or professional experience that demonstrates comparable knowledge.