{"id":128046,"url":"https://alion.io/job/reflection-ai-manager-of-technology-security-engineering","title":"MTS Lead, Technology & Security Engineering","company":{"id":48184,"name":"Reflection AI","domain":"reflection.ai","url":"https://alion.io/company/reflection-ai","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":91,"open_postings":47,"ghost_share":0.064,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":107,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":140000,"max_usd":287000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":453},"experience_years_min":20,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"CI/CD","optional":false},{"name":"Cloudflare","optional":false},{"name":"FedRAMP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"NIST CSF","optional":false},{"name":"Pulumi","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-07-14T19:56:54Z","employer_posted_date":"2026-07-14","last_verified_at":"2026-11-03T15:15:47Z","board_verified":true,"closed_at":null,"days_open":111,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":111},"description":"Our Mission\nReflection is a research lab making intelligence open and accessible for everyone to use, customize, and build on. We build open models that let anyone control their intelligence and help shape the future of AI. Our mission: make intelligence open and accessible to all.\nRole Overview\nAs the MTS Lead of Technology & Security Engineering is responsible for architecting and operating the security engineering foundation that protects the organization’s corporate environment, multi-cloud research infrastructure, and multi-million-dollar GPU training capacity. This lead owns the full technical security stack - from end-user compute and zero-trust access to cloud and container security, detection engineering, and security-as-code - ensuring the organization can move at research speed without sacrificing rigor.\nSitting at the intersection of security engineering, infrastructure, and research operations, this role is uniquely positioned to define how a frontier AI company protects its most sensitive assets - model weights, training data, and GPU capacity - while preserving the low-friction environment researchers and engineers need to do their best work. The ideal candidate brings deep, hands-on technical depth alongside the executive presence to lead a security engineering function, represent the organization’s security posture to auditors and enterprise customers, and negotiate vendor and contractual risk.\nThis is a high-visibility, high-impact role that operates across engineering, infrastructure, legal, and physical security. Success requires the ability to design guardrails rather than gates, build systems that assume compromise, and operate credibly as both an executive leader and a hands-on builder.\nWhat You'll Do\nHigh-Performance End User Compute (EUC)\nDesign and manage a highly resilient corporate device fleet spanning Linux, macOS, Windows and specialized hardware such as NVIDIA GPU workstations.\n\nShift the fleet away from restrictive MDM policies toward intelligent posture verification and cryptographic device binding, reducing friction without reducing assurance.\n\nSecure diverse local toolchains and developer environments without breaking the workflows researchers and engineers depend on.\n\nSecuring the Research & Training Boundary\nArchitect cloud-native security controls across multi-cloud environments that contain multi-million-dollar GPU clusters.\n\nEstablish IAM governance, network segmentation, and isolation boundaries appropriate to the scale and sensitivity of training infrastructure and model assets.\n\nPartner with infrastructure and research teams to ensure security controls scale with GPU capacity rather than constrain it.\n\nPhishing-Resistant Zero-Trust Access\nImplement continuous, context-aware authorization using modern mesh networks and proxies (e.g., Tailscale, Cloudflare One).\n\nEnforce hardware-backed authentication (WebAuthn/FIDO2 keys) across every corporate and production plane.\n\nEliminate standing and persistent access in favor of just-in-time, verifiable authorization.\n\nSecurity as Code (SaC)\nEnsure 100% of infrastructure, endpoint configurations, IAM policies, and cloud environments are declared in code (Terraform/Pulumi).\n\nEliminate configuration drift through automated CI/CD validation and continuous compliance checks.\n\nBuild repeatable, auditable deployment pipelines that make security posture provable rather than assumed.\n\nBehavioral Detection Engineering\nBuild telemetry pipelines that ingest high-fidelity logs into a cloud-native data lake to support detection at scale.\n\nDetect sophisticated post-exploitation techniques, lateral movement, and living-off-the-land attacks across corporate and production environments.\n\nContinuously tune detection coverage against an assumed-breach threat model, prioritizing time-to-detect and blast-radius containment.\n\nCompliance, Audit & Vendor Risk\nSupport SOC 2, ISO 27001, FedRAMP, ISO 22237, ISO 22301, NIST CSF, customer audits, and enterprise security reviews.\n\nLead vendor risk assessments, procurement security reviews, and security-related legal contract negotiations.\n\nOwn front-line defenses for a frontier AI company, including physical security and data center security operations.\n\nWhat We're Looking For\nExperience & Background\n20+ years of deep engineering experience at high-valuation companies, or in defense-grade environments.\n\nBattle-tested technical leadership with a track record of building and operating security engineering functions at scale.\n\nExperience supporting SOC 2, ISO 27001, FedRAMP, ISO 22237, ISO 22301, NIST CSF, customer audits, and enterprise security reviews.\n\nExperience leading vendor risk, procurement security reviews, and legal contract negotiations.\n\nExperience with front-line defenses for an AI company, including physical security and data center security operations.\n\nSkills & Capabilities\nDeep familiarity with Linux and macOS internals, including how to secure specialized hardware (NVIDIA GPUs) without breaking developer environments.\n\nExpert-level knowledge of public cloud architectures, IAM governance at scale, and Kubernetes/container isolation primitives.\n\nTechnical understanding of cloud and infrastructure security, Kubernetes and container security, zero-trust architectures, security operations at scale, identity and access management, detection and response technologies, and security automation and orchestration.\n\nAbility to operate as both an executive leader and a hands-on builder, moving fluidly between strategy and implementation.\n\nMindset & Approach\nA “guardrails, not gates” philosophy - understands that blocking a researcher from pulling a Python library or mounting a filesystem means security has failed, and builds accordingly using virtualization, sandboxing, and data isolation.\n\nAn adversarial mindset that designs systems under the assumption the endpoint will be compromised, focusing defenses on limiting blast radius, eliminating persistent access, and detecting post-compromise activity immediately.\n\nMotivated by building - comfortable operating in ambiguous, fast-moving environments where security infrastructure is maturing alongside a rapidly scaling research organization.\n\nWhat We Offer:\nWe believe that to make intelligence open and accessible to all, you need to start at the foundation. Joining Reflection means building from the ground up as part of a talent-dense team. You will help define our future as a company, and help define the future of open foundational models.\nWe want you to do the most impactful work of your career with the confidence that you and the people you care about most are supported.\nTop-tier compensation: Salary and equity structured to recognize and retain our talent globally.\n\nStock options: Everyone who joins and contributes to Reflection's success gets to share in the upside through stock options.\n\nHealth & wellness: Comprehensive medical, dental, vision, and life, with an annual wellness allowance.\n\nMeals: Lunch and dinner are provided in the office daily.\n\nLife & family: 22 weeks paid parental leave for all new birthing and non-birthing parents, including adoptive and surrogate journeys.\n\nVacation days: Unlimited paid time off in the U.S. and 30 days in the U.K.\n\nSponsorship support: We sponsor visas to help exceptional talent join our team and support long-term immigration pathways where applicable.\n\nTeam building: We have regular off-sites, happy hours, and team celebrations.\n\nExport Control Notice: This position may require access to technology or source code subject to the U.S. Export Administration Regulations. Any offer of employment for this role may be conditioned on the Company's ability to provide the candidate with access to such technology or source code in compliance with applicable U.S. export control laws, which may require the Company to seek government authorization.\nCandidate and Employee Privacy Notice: We collect and process personal data about applicants for the purposes described in our Candidate and Employee Privacy Notice","description_format":"text","description_chars":8047,"description_truncated":false,"requirements":{"experience_years_min":20,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Foundation Models","AI Research Labs"],"lifecycle":[{"event":"open","at":"2026-07-14T19:56:54Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 35","filings_12m":35,"filings_prev_12m":4,"green_card_filings_12m":0,"median_offered_wage_usd":188214,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":36,"band":"fade","label":"Fading","p_open":1,"p_active":0.815,"p_room":0.44,"age_days":111,"expected_fill_days":107,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/reflection-ai-manager-of-technology-security-engineering","json_url":"https://alion.io/job/reflection-ai-manager-of-technology-security-engineering.json","meta":{"generated_at":"2026-11-03T17:24:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24279,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48184},"rest":"https://alion.io/mcp/rest/get_company?id=48184"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Freflection-ai-manager-of-technology-security-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Freflection-ai-manager-of-technology-security-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Freflection-ai-manager-of-technology-security-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/reflection-ai-manager-of-technology-security-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Freflection-ai-manager-of-technology-security-engineering"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":128046}},{"tool":"search_jobs","arguments":{"company":"reflection.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":128046},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}