MTS Lead, Technology & Security Engineering

The role

The MTS Lead of Technology & Security Engineering will architect and operate the security engineering foundation. This includes protecting corporate environments, multi-cloud research infrastructure, and GPU training capacity.

What you will do

• Design and manage a resilient corporate device fleet spanning Linux, macOS, Windows and NVIDIA GPU workstations.
• Architect cloud-native security controls across multi-cloud environments.
• Establish IAM governance, network segmentation, and isolation boundaries.
• Implement continuous, context-aware authorization using modern mesh networks and proxies.
• Enforce hardware-backed authentication across corporate and production planes.
• Ensure infrastructure, endpoint configurations, IAM policies, and cloud environments are declared in code.
• Build telemetry pipelines to support detection at scale.
• Support SOC 2, ISO 27001, FedRAMP, ISO 22237, ISO 22301, NIST CSF, customer audits, and enterprise security reviews.
• Lead vendor risk assessments, procurement security reviews, and security-related legal contract negotiations.
• Own front-line defenses including physical security and data center security operations.

Required qualifications

• 20+ years of deep engineering experience at high-valuation companies, or in defense-grade environments.
• Battle-tested technical leadership with a track record of building and operating security engineering functions at scale.
• Experience supporting SOC 2, ISO 27001, FedRAMP, ISO 22237, ISO 22301, NIST CSF, customer audits, and enterprise security reviews.
• Experience leading vendor risk, procurement security reviews, and legal contract negotiations.
• Experience with front-line defenses for an AI company, including physical security and data center security operations.
• Deep familiarity with Linux and macOS internals, including how to secure specialized hardware (NVIDIA GPUs).
• Expert-level knowledge of public cloud architectures, IAM governance at scale, and Kubernetes/container isolation primitives.
• Technical understanding of cloud and infrastructure security, Kubernetes and container security, zero-trust architectures, security operations at scale, identity and access management, detection and r
• Ability to operate as both an executive leader and a hands-on builder.

Benefits

• Salary and equity
• Stock options
• Comprehensive medical, dental, vision, and life
• Annual wellness allowance
• Lunch and dinner provided in the office daily
• 22 weeks paid parental leave for all new birthing and non-birthing parents, including adoptive and surrogate journeys
• Unlimited paid time off in the U.S.
• 30 days paid time off in the U.K.
• Visa sponsorship support
• Regular off-sites, happy hours, and team celebrations

Before you apply

• This position may require access to technology or source code subject to the U.S. Export Administration Regulations.
• Offer of employment may be conditioned on the Company's ability to provide access to technology or source code in compliance with U.S. export control laws.

About the company

Reflection is a research lab making intelligence open and accessible for everyone to use, customize, and build on. They build open models that let anyone control their intelligence and help shape the future of AI.