Security Engineer

Responsibilities

• Secure the end-to-end ML lifecycle against threats such as data poisoning and model-weight theft.
• Design and deploy prompt-injection defenses, runtime firewalls, and AI Security Posture Management for models, datasets, and proprietary endpoints.
• Embed secret scanning, API exposure checks, software composition analysis, and other security guardrails into CI/CD workflows.
• Implement Infrastructure as Code security policies and ensure cloud resources comply with applicable standards such as GDPR and SOC2.
• Manage secrets and vulnerability patching for Docker and Kubernetes environments.
• Design least-privilege IAM controls for sensitive training data and research workloads.
• Lead incident response, monitor production logs for anomalies, and collaborate with AI Researchers on rapid remediation.
• Provide local IDE security scanning and pre-commit tooling while educating engineering and research teams on security practices.

Requirements

• At least 3 years of experience in a DevSecOps, Cloud Security, or Site Reliability Engineering role.
• Experience building and securing CI/CD pipelines using tools such as GitHub Actions, GitLab CI, or Jenkins.
• Strong proficiency with Infrastructure as Code tools such as Terraform or Pulumi.
• Experience securing cloud environments using AWS, GCP, or Azure.
• Deep understanding of container security and orchestration with Docker and Kubernetes.
• Practical knowledge of security frameworks and their implementation in development environments.
• Experience with AI-specific security tools or LLM-specific vulnerabilities such as the OWASP Top 10 for LLMs is preferred.
• Experience with AI Security Posture Management tools is preferred.
• Relevant certifications such as AWS Certified Security, CSEP, or OSCP are preferred.
• Background or personal interest in materials science, chemistry, AI, or physical sciences is a bonus.

Benefits

• Hybrid work from the Cambridge, London, Amsterdam, or Berlin office with an expectation of three days per week in the office.
• At least a few weeks of onboarding in the Cambridge/London office and potential regular travel to Europe and other regional or global locations.
• Equity in CuspAI.
• 28 days of holiday in Germany, the Netherlands, and the UK, or 21 days in Japan, Singapore, and the US, in addition to local public holidays.
• 26 weeks of fully paid parental leave for primary caregivers and 12 weeks for secondary caregivers.
• Professional development budget.
• Work on interdisciplinary AI, materials science, computational chemistry, and sustainability projects.