Security Engineer (Research Infrastructure)

ABOUT RESOLUTION Resolution does research on how to align artificial superintelligence (ASI). ASI may be developed in the next few years, but it is unclear whether alignment is on track to be ready in the same timeframe. We aim at higher a priori confidence in aligned outcomes by pursuing a portfolio of theory and empirics bets, any one of which — if it succeeds — would meaningfully advance the field. We invest heavily in research automation to accelerate progress, and we believe that stronger alignment theory unlocks higher automation: more principled approaches give us better filters for which directions of automated research are promising. Resolution was founded in 2026 by researchers from UK AISI's Alignment Team, who ran the £30m Alignment Project https://alignmentproject.aisi.gov.uk/, and Timaeus https://timaeus.co/, who pioneered applying singular learning theory to alignment. For more information, see our announcement https://sequent.org/launch. ABOUT THE TEAM Resolution's work will involve sensitive frontier-relevant research and partnerships with AI labs. This role exists both to protect that work and to enable it: good security is what makes deeper lab partnerships possible. We draw a distinction between two closely related areas of security: - Research & infrastructure security. Securing how research actually runs: CI/CD pipelines, automated research agents, multi-cloud compute, and code/data/model-weight handling. - Corporate IT & security. The endpoint, identity, and collaboration scaffolding a distributed research org runs on, in combination with the compliance frameworks that unlock lab partnerships. This role focuses on the former, covering security on the technical side of the organization. You would report to senior leadership and work closely with our security and engineering teams (as well as with our operations team). In practice, we expect to grow the security team one hire at a time, so your initial set of responsibilities is likely to span both areas. We expect the distinction to clarify over time. ABOUT THE ROLE You are the security architect for our research pipeline. You'll define how we securely conduct research across multiple cloud environments, partnering closely with engineering to make CI/CD, automated research agents, and large-scale compute secure by default. You would build a hardened environment where researchers and agents iterate at speed without risking data leakage, supply-chain compromise, and other security failures. RESPONSIBILITIES 1. Secure DevSecOps & CI/CD Orchestration - Pipeline Hardening: Build security guardrails directly into our CI/CD pipelines. Ensure that every deployment, whether manual or agent-driven, is automatically scanned, verified, and compliant. - Automated Verification: Establish workflows where our agents can test their own code and infrastructure changes against security policies before deploying to production environments. - Infrastructure as Code (IaC): Lead the implementation of "Compliance as Code." Automate the auditing and enforcement of security configurations across our AWS, GCP & neocloud footprints. 2. Supply Chain Security for Automated Research - Provenance and Integrity: In an environment where we rely heavily on automated coding agents, build systems to ensure the provenance of code and dependencies. Implement robust signing, SBOM (Software Bill of Materials) generation, and automated vulnerability management. - Agent Sandbox Security: Define and enforce security models for our research agents. Ensure that agents have the "least privilege" access required to execute experiments while remaining isolated from sensitive IP and credentials. 3. Multi-Cloud Research Infrastructure - Compute Security: Manage the security architecture for our high-compute research environments. We operate in a multi-cloud ecosystem; you will be responsible for consistent, zero-trust network segmentation and identity management across disparate cloud providers. - Research Data Protection: Develop and maintain the data handling protocols necessary for working with pre-publication research and potentially sensitive model weights. 4. Enabling Frontier Access - Compliance as a Competitive Advantage: Partner with AI labs to navigate security audits. You will bridge the gap between our "move fast" research culture and the high-bar security requirements of frontier model providers, turning compliance into an accelerator for our research agenda. YOU MAY BE A GOOD FIT IF YOU - Are a seasoned security engineer who writes code, with deep experience in Terraform, Kubernetes, and CI/CD tools (GitHub Actions, GitLab CI). - Have managed security across multiple cloud providers (AWS / GCP / neoclouds) and understand the nuance of securing ephemeral, high-compute research clusters. - Take a pragmatic approach to modern software supply chains and understand the unique risks of AI-driven development and how to mitigate them without killing velocity. - Understand the threat model of a high-value target for state-level actors and IP theft, and can build systems robust against sophisticated adversaries. - Can explain complex security trade-offs to lead researchers and scientists, saying "yes, safely" rather than just "no." - Are willing to use AI tools aggressively in your own workflow, with appropriate care to not get fooled! - Are motivated by alignment of artificial superintelligence (ASI) and want to contribute to it full-time. WHY THIS ROLE IS UNIQUE At this organization, "Corporate Security" is a separate function. This role is focused on the Research Infrastructure. You will be working at the frontier of how automated alignment research is actually done. You will be building the security primitives for a new way of doing science: one where humans and machines collaborate to solve the most important problem of the 21st century. LOGISTICS Salary: Your salary depends on the scope, autonomy, and impact we expect you to have while working at Resolutio