{"id":27031,"url":"https://alion.io/job/metr-security-engineer","title":"Platform Engineer, Application Security","company":{"id":33251,"name":"METR","domain":"metr.org","url":"https://alion.io/company/metr-org","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-17T05:46:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Berkeley, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":328380,"max":578583,"currency":"USD","period":"year","gross":null,"usd_annual":578583},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Amazon Aurora","optional":true},{"name":"Amazon CloudWatch","optional":true},{"name":"Amazon ECS","optional":true},{"name":"Amazon EKS","optional":true},{"name":"AWS Lambda","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Datadog","optional":true},{"name":"Falcon","optional":true},{"name":"Google Workspace","optional":true},{"name":"LLM","optional":true},{"name":"Okta","optional":true},{"name":"PostgreSQL","optional":true},{"name":"Pulumi","optional":true},{"name":"Red Teaming","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-07-08T14:27:20Z","employer_posted_date":"2026-07-08","last_verified_at":"2026-10-17T13:54:49Z","board_verified":true,"closed_at":null,"days_open":101,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":100},"description":"About METR\nWe are a nonprofit research organization that develops scientific methods to assess AI capabilities, risks, and mitigations, with a specific focus on threats related to AI R&D automation and misalignment.\nWe believe it is robustly good for policymakers and civil society to have a clear understanding of risks from AI systems, and we are extremely excited to build a team of ambitious, excellent people to tackle one of the most important challenges of our time.\nAbout the role\nMETR’s mission of enabling transparency and coordination about the risks of frontier AI requires a high degree of trust from frontier AI labs, governments, and the public. As misalignment incidents become more extreme and confidential information about models and frontier AI labs becomes more valuable, we expect to be under increasingly intense pressure from external actors and internal agents.\nMETR is looking to expand the security expertise on our platform team. This would span application security in our evaluation platform, sandboxing agents and evaluations, cloud platform security, networking, access control for both people and agents, and securing our development environments and workflows. This role will have a large engineering component: expect to write and review code, fix vulnerabilities, and design and develop secure systems.\nWhat this role looks like\nSecuring a unique attack surface. METR's evaluation infrastructure runs frontier AI agents, including early checkpoints of unreleased models, executing untrusted, model-generated code at scale on multi-day tasks. You will design and build the isolation, networking, and permission boundaries that contain evaluated agents.\n\nRemediation and hardening. You will find, triage, and fix vulnerabilities across our cloud infrastructure and access control systems.\n\nFixing known vulnerabilities in our codebase. This includes code reviews and resolving known vulnerabilities in our backlog.\n\nIdentity and access as a system. You will design and implement IAM policies, least-privilege access, and automated provisioning and access review for both people and agents.\n\nSecuring agentic systems. You will design and implement systems to monitor and control agents, making sure they can operate securely and with appropriate permissions and guardrails.\n\nRequired skills\n7+ years of experience working in security engineering, software development, or an adjacent field.\n\nProduction software engineering. You have experience building and operating backend or infrastructure in practice.\n\nCloud and container security. You have deep familiarity with AWS (especially non-trivial IAM), Kubernetes, and infrastructure-as-code environments.\n\nVulnerability remediation. You have found and fixed security flaws in large production systems and can prioritize a remediation backlog.\n\nSecurity fundamentals. Strong security knowledge across systems, networks, cloud, and identity, and a track record of applying it to real systems. Experienced in designing secure software and cloud architectures.\n\nCode review. Reviewing and giving constructive security feedback on PRs, including from the FOSS community.\n\nNice to haves\nDetection engineering at scale: Experience with detection pipelines (DataDog SIEM, AWS SecurityHub), writing and tuning detections, and threat hunting.\n\nOffensive security: Experience with red teaming, penetration testing, and/or vulnerability research.\nAI/LLM engineering: You build with AI: agent pipelines, LLM-powered tooling, automated workflows, and understand current limitations of those tools.\n\nAI security research: Familiarity with agent control, hardware security, or red teaming AI systems themselves.\n\nIdeally you have experience with a portion of these technologies:\nAWS: cloud-native software platforms\n\nEKS\n\nLambda\n\nECS\n\nIAM (in-depth)\n\nCloudWatch\n\nSecurityHub & GuardDuty\n\nPostgreSQL: RLS, serverless Aurora\n\nPulumi: IaC\n\nDataDog: SIEM\n\nOkta: IdP\n\nGoogle Workspace: IdP\n\nTailscale: networking\n\nCrowdStrike Falcon: endpoint security","description_format":"text","description_chars":4014,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","AI Safety & Alignment","AI Research Labs","Nonprofits & Foundations"],"lifecycle":[{"event":"open","at":"2026-07-08T14:27:20Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.351,"p_room":0.28,"age_days":100,"expected_fill_days":26,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":578583,"is_top_pay":true},"html_url":"https://alion.io/job/metr-security-engineer","json_url":"https://alion.io/job/metr-security-engineer.json","meta":{"generated_at":"2026-10-17T14:33:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19548,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":33251},"rest":"https://alion.io/mcp/rest/get_company?id=33251"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmetr-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmetr-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmetr-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/metr-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmetr-security-engineer"}]}