security architect

NTT DATA

<div>At NTT DATA, you have endless opportunities to think big, act bold and take ownership. As a $30+ billion business and technology services, AI and digital infrastructure leader, we co-innovate solutions with clients and partners globally for business and societal impact. Serving 75% of the Fortune Global 100, with experts in over 70 countries, we encourage experimentation and recognize great work. Proudly a Global Top Employer, NTT DATA is part of NTT Group, which invests over $3 billion annually in R&amp;D. Make this the place where you belong, learn, and build your network. Make this the place where you grow. 
1. AI Security Strategy &amp; Architecture
<ul><li>Define and lead the AI security architecture roadmap aligned to enterprise security strategy.</li>
<li>Develop secure-by-design frameworks for AI/ML pipelines, including data ingestion, training, inference, and deployment.</li>
<li>Establish AI trust, risk, and compliance controls (e.g., explainability, fairness, robustness).</li>
</ul>
2. Threat Modelling &amp; Risk Management
<ul><li>Conduct threat modelling for AI systems, identifying vulnerabilities such as:
<ul><li>Adversarial attacks (evasion, poisoning)</li>
<li>Model inversion and extraction</li>
<li>Data leakage and privacy risks</li>
</ul></li><li>Define and implement risk mitigation strategies and controls.</li>
<li>Perform AI security risk assessments and integrate findings into governance processes.</li>
</ul>
3. Secure AI/ML Lifecycle
<ul><li>Integrate security into ML pipelines (MLSecOps) including CI/CD and MLOps frameworks.</li>
<li>Define controls for:
<ul><li>Secure dataset handling and lineage</li>
<li>Model versioning and integrity validation</li>
<li>Access control and secrets management</li>
</ul></li><li>Embed automated security testing into model development pipelines.</li>
</ul>
4. Data Protection &amp; Privacy
<ul><li>Ensure compliance with data protection regulations (e.g., GDPR, HIPAA where applicable).</li>
<li>Implement privacy-preserving techniques such as:
<ul><li>Differential privacy</li>
<li>Federated learning</li>
<li>Data anonymization and synthetic data</li>
</ul></li><li>Define policies for sensitive data usage in AI models.</li>
</ul>
5. Security Controls for Emerging AI Risks
<ul><li>Design safeguards for:
<ul><li>Large Language Models (LLMs) and generative AI (prompt injection, hallucinations, data exfiltration)</li>
<li>API and model endpoint security</li>
</ul></li><li>Implement guardrails and monitoring solutions for generative AI usage.</li>
</ul>
6. Governance, Compliance &amp; Standards
<ul><li>Establish AI security standards, policies, and guidelines aligned to frameworks such as:
<ul><li>NIST AI Risk Management Framework</li>
<li>ISO/IEC 27001, 23894</li>
</ul></li><li>Support regulatory compliance and audits related to AI security.</li>
</ul>
7. Collaboration &amp; Advisory
<ul><li>Partner with data scientists, ML engineers, DevOps, and security teams to embed security practices.</li>
<li>Act as a trusted advisor to business and technology stakeholders on AI-related risks.</li>
<li>Provide security design reviews for AI initiatives.</li>
</ul>
8. Monitoring &amp; Incident Response
<ul><li>Define monitoring for model drift, anomalies, and misuse detection.</li>
<li>Develop playbooks for AI-related security incidents, including model compromise or data breaches.</li>
<li>Lead investigations involving AI system risks.</li></ul> 

<ul><li>20+ years of experience in cybersecurity, with at least 3+ years in AI/ML security or data security.</li>
<li>Proven experience designing secure architectures for AI/ML systems.</li>
<li>Strong knowledge of:
<ul><li>Machine learning frameworks (TensorFlow, PyTorch, etc.)</li>
<li>Cloud platforms (Azure, AWS, GCP) and AI services</li>
<li>Identity &amp; access management, encryption, and network security</li>
</ul></li><li>Experience in threat modeling and risk assessment methodologies.</li>
<li>Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Cybersecurity, AI/ML, or related field.</li></ul> 

Preferred Qualifications
<ul><li>Certifications such as:
<ul><li>CISSP, CISM, CCSP</li>
<li>Certified AI Security (e.g., CAISP or similar)</li>
</ul></li><li>Experience with:
<ul><li>MLOps platforms (e.g., MLflow, Kubeflow)</li>
<li>AI red teaming and adversarial testing</li>
</ul></li><li>Knowledge of secure coding and DevSecOps practices.</li>
<li>Familiarity with Responsible AI principles and ethical AI frameworks.</li></ul> 

Key Skills
<ul><li>AI/ML security and adversarial techniques</li>
<li>Cloud security architecture</li>
<li>Data privacy and protection</li>
<li>Threat modeling and risk analysis</li>
<li>DevSecOps / MLSecOps</li>
<li>API and application security</li>
<li>Governance, risk, and compliance (GRC)</li>
<li>Strong communication and stakeholder management</li></ul> 

We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.
You can find more information about NTT DATA UK &amp; Ireland here: https://uk.nttdata.com/
We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.
Role &ndash; AI SECURITY ARCHITECT
Hybrid Variable - London or Birmingham
Overview
We are seeking an experienced AI Security Architect to design, implement, and govern secure AI/ML systems across the enterprise. This role is responsible for embedding security, privacy, and trust into AI solutions&mdash;from model development and deployment to monitoring and lifecycle management. The ideal candidate will combine deep cybersecurity expertise with hands-on knowledge of AI/ML technologies, ensuring that AI systems are resilient against adversarial threats, data leakage, and misuse.</div>

AI Security Architect

JPMorganChase

<div>JOB DESCRIPTION 
 
 
Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that prioritize security from the start.
Job Summary:
As a Senior DevSecOps Architect in the Cybersecurity &amp; Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy, and serving as the subject matter expert for the DevSecOps strategy as well as embedding automated security controls into CI/CD pipelines. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.
Job Responsibilities:
<ul><li>Pipeline Security Architecture - Design, implement, and continuously improve security architecture for CI/CD pipelines and DevOps toolchains, ensuring automated security checks are embedded at every stage from code commit to production deployment.</li>
<li>Security-as-Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments.</li>
<li>Threat Modeling &amp; Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive adoption of secure design patterns.</li>
<li>Automated Guardrails at Scale - Design and deploy automated preventive and detective guardrails to proactively reduce risk across CICD pipelines, cloud and SaaS environments.</li>
<li>Security Culture &amp; Enablement - Cultivate a security-first culture across product, technology, and business teams by providing developer-friendly tooling, training, and reusable secure patterns that accelerate rather than hinder delivery.</li>
<li>Risk &amp; Issue Management - Act with urgency to manage emerging security issues, monitor risk indicators, and recommend resolutions. Serve as the escalation point for IT Risk and Cyber domains related to DevSecOps and Change Management.</li>
<li>Stakeholder Partnership - Partner with engineering leads, product owners, and vendors to ensure effective technology risk management, translating regulatory and policy requirements into actionable, engineer-friendly controls.</li>
<li>Audit &amp; Regulatory Support - Support audit, regulatory, and risk activities by providing evidence of control effectiveness and translating compliance requirements into automated, repeatable processes.</li>
<li>Continuous Improvement - Identify and address unfamiliar technology components, share best practices, and influence peers to drive continuous improvement in DevSecOps maturity across the organization.</li>
</ul>Required Qualifications, Capabilities, and Skills:
<ul><li>Advanced threat modeling experience (e.g., STRIDE-LM) for DevOps/CICD Pipelines and toolchains.</li>
<li>Expert ability to advise and influence secure pipeline architecture using Policy-as-Code and automated gates.</li>
<li>Hands-on security expertise in AWS and GCP.</li>
<li>Practical experience creating reference architectures and patterns for engineering teams.</li>
<li>Proven ability to design and deploy automated preventive and detective guardrails at scale.
</li><li>Expertise in leveraging IaC scanning to detect misconfigurations and compliance violations across Terraform and Kubernetes manifests</li>
<li>Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions</li>
<li>Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security.</li>
<li>Ability to solve design and functionality problems independently.</li>
<li>Strong written and verbal communication skills.</li>
<li>Demonstrated success in influencing peers and stakeholders.</li>
<li>Ability to evaluate and recommend emerging technologies for future state architecture.</li>
</ul>Preferred Qualifications, Capabilities, and Skills:
<ul><li>Shift-Left/Start-Left Evangelism - A proven track record of mentoring developers and fostering a culture where security is a shared responsibility</li>
<li>Relevant certifications: AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer, CISSP, CKS, OSCP.</li>
<li>Experience operating in regulated organizations with a 3LoD model.</li>
<li>Willingness to challenge existing processes respectfully.</li>
<li>Experience translating policy and regulatory requirements into control design for engineers and architects.</li>
<li>Proven ability to upskill and learn modern technologies.</li>
<li>Experience in financial services consumer businesses or Fintech organizations.</li>
</ul>#ICBCareers
ABOUT US
 
 
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. 
<div><div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. 
</div></div> 
 
ABOUT THE TEAM
 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Senior DevSecOps Architect

TripleLift

<div><div>About TripleLift

We're TripleLift, an advertising platform on a mission to elevate digital advertising through beautiful creative, quality publishers, actionable data and smart targeting. Through over 1 trillion monthly ad transactions, we help publishers and platforms monetize their businesses. Our technology is where the world's leading brands find audiences across online video, connected television, display and native ads. Brand and enterprise customers choose us because of our innovative solutions, premium formats, and supportive experts dedicated to maximizing their performance.
As part of the Vista Equity Partners portfolio, we are NMSDC certified, qualify for diverse spending goals and are committed to economic inclusion. Find out how TripleLift raises up the programmatic ecosystem at triplelift.com.</div><h2 class="jobSectionHeader">
Overview</h2> 


The Senior/Principal Identity and API Architect plays a critical role in driving TripleLift's identity infrastructure and API security strategy within the Exchange team, directly influencing how we authenticate and authorize publishers, buyers, and platform partners across our programmatic marketplace. In this position, you will partner closely with Engineering, Product, and Services teams to design and own the end-to-end identity architecture that underpins our Exchange's security, scalability, and interoperability. This is an exciting opportunity for someone who wants to build a best-in-class identity platform from the ground up, shaping how TripleLift authenticates billions of programmatic transactions while serving as a strategic thought partner to Exchange leadership on API governance and access control. 

<h2 class="jobSectionHeader">
Responsibilities</h2> 

<ul>
<li>Architect and own TripleLift's end-to-end identity platform, including tenant models, SSO integrations, machine-to-machine authentication, and delegated administration for publishers and demand partners.</li>
<li>Design and implement Auth0 tenant architecture, including custom domains, enterprise connections, Actions/Rules, and token lifecycle management (refresh rotation, session policies, JWKS).</li>
<li>Define and enforce OAuth 2.0 and OIDC flows across the Exchange &mdash; including PKCE, M2M client credentials, and device authorization &mdash; ensuring secure and consistent authentication for all platform participants.</li>
<li>Build and operate multi-tenant authorization models using OpenFGA or comparable ReBAC systems (e.g., SpiceDB, Ory Keto), enabling fine-grained access control across publisher hierarchies (networks, properties, seats, users).</li>
<li>Own the API gateway layer, designing rate limiting, scoped token validation, mTLS enforcement, and consistent error semantics across Traefik, Kong, AWS API Gateway, or equivalent infrastructure.</li>
<li>Lead publisher-side identity integrations, including federated SSO (SAML 2.0, OIDC) for enterprise onboarding, delegated self-service administration, and integration of first-party data and authenticated traffic signals into programmatic decisioning.</li>
<li>Lead demand-side identity integrations, including DSP and agency API authentication (OAuth 2.0 M2M, API key management), partner onboarding flows, and identity traceability across bid request/response flows for audit, fraud detection, and deal enforcement.</li>
<li>Manage AWS identity and API infrastructure, including IAM roles and cross-account trust, Cognito integration patterns, Secrets Manager and KMS for credential lifecycle, and STS-based service-to-service auth in multi-account environments.</li>
<li>Establish and maintain identity and API security standards, conducting threat modeling, reviewing integrations for compliance with RBAC/ABAC/ReBAC policies, and responding to security incidents.</li>
<li>Serve as the internal subject-matter expert on identity and API architecture, partnering with Engineering, Legal, and Partnerships to advise on protocol selection, vendor evaluation, and regulatory considerations (e.g., GDPR, CCPA as they relate to identity signals).</li>
<li>Mentor engineers across the Exchange team on identity best practices, OAuth/OIDC protocol nuances, and secure API design patterns.</li></ul> 

<h2 class="jobSectionHeader">
Education &amp; Requirements</h2> 

<ul>
<li>8+ years of software engineering or platform architecture experience, with at least 4 years focused on identity, IAM, or API security</li>
<li>2+ years of hands-on production experience with Okta's Auth0, including:</li>
<li><ul><li>Tenant architecture, custom domains, and enterprise connections</li>
<li>Actions/Rules/Hooks and the Auth0 Management API</li>
<li>OIDC/OAuth 2.0 flows including PKCE, M2M client credentials, and device authorization</li>
<li>Token customization, refresh token rotation, and session management</li>
<li>Production experience with OpenFGA or a comparable relationship-based access control (ReBAC) system (e.g., Zanzibar-derived implementations, Ory Keto, SpiceDB)</li>
</ul></li><li>Deep fluency in OAuth 2.0, OpenID Connect, SAML 2.0, JWT, and JWKS</li>
<li>Demonstrated AWS identity and API infrastructure experience, including:</li>
<li><ul><li>IAM roles, policies, and cross-account trust relationships</li>
<li>API Gateway (REST and HTTP APIs), Lambda authorizers, and Cognito integration patterns</li>
<li>Secrets Manager and KMS for credential and key lifecycle management</li>
<li>STS and service-to-service authentication in distributed, multi-account environments</li>
</ul></li><li>Experience designing and operating API gateway layers at scale, including hands-on work with one or more of: Traefik, Kong, AWS API Gateway, or equivalent &mdash; encompassing rate limiting, scoped token validation, mTLS, and consistent error semantics</li>
<li>Experience with publisher-side identity integrations:</li>
<li><ul><li>Federated SSO (SAML 2.0, OIDC) for publisher onboarding and enterprise identity provider connections</li>
<li>Multi-tenant identity models supporting publisher hierarchies: networks, properties, seats, and users</li>
<li>Delegated administration patterns enabling publishers to self-manage sub-accounts and user roles</li>
<li>Integration with publisher identity signals for decisioning (authenticated traffic, first-party data tokens)</li>
</ul></li><li>Experience with demand-side identity integrations:</li>
<li><ul><li>DSP and agency API authentication: OAuth 2.0 M2M, API key management, and scoped access models</li>
<li>Partner onboarding flows supporting both self-serve and managed programmatic demand</li>
<li>Identity traceability across bid request/response flows for audit, fraud detection, and deal enforcement</li>
<li>Integration with buyer identity infrastructure including agency trading desk and DSP seat management</li>
</ul></li><li>Demonstrated ability to model complex, multi-tenant authorization hierarchies using RBAC, ABAC, or ReBAC</li>
<li>Proficiency in at least one backend language (Go, Java, or Python preferred)</li>
</ul><div>
Life at TripleLift

At TripleLift, we're a team of great people who like who they work with and want to make everyone around them better. This means being positive, collaborative, and compassionate. We hustle harder than the competition and are continuously innovating.
Learn more about TripleLift and our culture by visiting our LinkedIn Life page.

Establishing People, Culture and Community Initiatives

At TripleLift, we are committed to building a culture where people feel connected, supported, and empowered to do their best work. We invest in our people and foster a workplace that encourages curiosity, celebrates shared values, and promotes meaningful connections across teams and communities. We want to ensure the best talent of every background, viewpoint, and experience has an opportunity to be hired, belong, and develop at TripleLift. Through our People, Culture, and Community initiatives, we aim to create an environment where everyone can thrive and feel a true sense of belonging.

Privacy Policy

Please see our Privacy Policies on our TripleLift and 1plusX websites.

TripleLift does not accept unsolicited resumes from any type of recruitment search firm. Any resume submitted in the absence of a signed agreement will become the property of TripleLift and no fee shall be due.</div></div>

Principal Identity and API Architect

ByDesign Secure

This role is delivered within secure environments. Candidates must be eligible for UK SC and DV clearance and hold UK Citizenship.Opening: Join the MissionAt ByDesign Secure, we believe that world-class security shouldn't be an afterthought&mdash;it should be the foundation. We are an independent, outputs-based consultancy dedicated to solving the most complex data assurance challenges in the UK public sector. Currently, we are working on a landmark transformation of a cross-government secure IT system. This is an exciting opportunity to help architect a private cloud environment from the ground up and modernize the end-user services that power national decision-making. We don't believe in &quot;billing by the hour&quot; or rigid hierarchies; we are a lean, expert team focused on delivering high-impact technical outcomes. If you are a self-starter who thrives on autonomy and wants to see your engineering or architectural decisions shape the future of sovereign security, we want to talk to you.About the Opportunity<ul><li>We are seeking a skilled Cloud Security Engineer to design and implement secure workloads within a Google Distributed Cloud (GDC) environment.</li><li>This role is ideal for a security professional with a strong GCP background (Other CSP experience also considered) and an active Professional Cloud Security Engineer certification, as these competencies are directly transferable to managing security in air-gapped or edge configurations.</li><li>You will be responsible for ensuring security, rigour, and compliance within mission-critical government secure delivery.</li></ul>What You&rsquo;ll Be Doing<ul><li>Identity &amp; Access Management: Designing and managing complex identity architectures, including single sign-on (SSO) integration, multi-factor authentication (MFA), and the automated lifecycle management of privileged user accounts.</li><li>Authorisation &amp; Resource Hierarchy: Defining granular resource hierarchies and implementing the principle of least privilege using advanced identity policies, conditions, and organizational constraints.</li><li>Boundary &amp; Perimeter Protection: Configuring robust network defences, including next-generation firewalls, web application firewalls (WAF), and secure service perimeters to isolate sensitive workloads.</li><li>Data Protection &amp; Encryption: Implementing discovery and redaction services for sensitive data (PII) and managing full-lifecycle encryption through hardware or software-based key management systems.</li><li>Securing the Software Supply Chain: Automating vulnerability scanning and policy enforcement within continuous integration and delivery (CI/CD) pipelines to ensure only authorised code is deployed.</li></ul>Key Tools/Working practices<ul><li>Use GDC Console, gdcloud CLI, and kubectl to manage infrastructure, users, workloads, security policies, and platform resources across projects and clusters</li><li>Implement Terraform and Ansible with Git‑based workflows to deliver repeatable, version‑controlled infrastructure and configuration (GitOps), including Config Sync for consistent environments</li><li>Configure IAM, RBAC, service accounts, and identity provider integration to enforce least‑privilege access and secure authentication, with policy enforcement via OPA Gatekeeper</li><li>Define and secure network boundaries using project network policies (ingress/egress control) and manage encryption and trust with KMS and Certificate Authority services</li><li>Build and package applications using Docker and Helm, store images in Harbor, and integrate vulnerability scanning (e.g. Trivy) to detect and remediate issues before deployment</li><li>Test and interact with APIs using curl/REST tools and develop AI capabilities using Vertex AI libraries and notebook environments (e.g. JupyterLab)</li><li>Monitor and troubleshoot using Grafana, Prometheus, and Loki for metrics and logs, with audit logging and SIEM integration for security and compliance</li><li>Configure alerting for failures, anomalies, and SLO breaches, and implement backup and restore processes for resilience and disaster recovery</li><li>Use platform documentation and support channels to validate configurations, follow operational procedures, and resolve issues</li></ul>What You&rsquo;ll Bring<ul><li>Demonstrable experience as a practicing Security Engineer, with the ability to transition cloud-native security best practices to a distributed/edge platform.</li><li>Deep proficiency in configuring network security defences, threat monitoring, and regulatory compliance controls.</li></ul>Bonus Points For<ul><li>Current, non-expired Professional Cloud Security Engineer certification.</li><li>Experience operating within or alongside classified UK Government secure environments (e.g., SECRET or above).</li><li>Familiarity with GDS Service Standards or equivalent public sector delivery frameworks.</li><li>Experience working in air-gapped or disconnected environments with little or no internet connectivity</li></ul>Clearance Requirements:<ul><li>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV).</li></ul>Work Location: Hybrid remote in LondonJob Types: Temporary, Fixed term contract (Outside of IR35)Job Types: Fixed term contract, TemporaryPay: &pound;650.00 per dayApplication question(s):<ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul>Work Location: Hybrid remote in London

Cloud Security Engineer – SC Eligible – Government Projects

Resolution

<div><h1 class="jobSectionHeader">About Resolution</h1>
Resolution does research on how to align artificial superintelligence (ASI). ASI may be developed in the next few years, but it is unclear whether alignment is on track to be ready in the same timeframe. We aim at higher a priori confidence in aligned outcomes by pursuing a portfolio of theory and empirics bets, any one of which &mdash; if it succeeds &mdash; would meaningfully advance the field. We invest heavily in research automation to accelerate progress, and we believe that stronger alignment theory unlocks higher automation: more principled approaches give us better filters for which directions of automated research are promising.
Resolution was founded in 2026 by researchers from UK AISI's Alignment Team, who ran the &pound;30m Alignment Project, and Timaeus, who pioneered applying singular learning theory to alignment.
For more information, see our announcement.<h1 class="jobSectionHeader">
About the Team</h1>
Resolution's work will involve sensitive frontier-relevant research and partnerships with AI labs. This role exists both to protect that work and to enable it: good security is what makes deeper lab partnerships possible. We draw a distinction between two closely related areas of security:<ul><li>
Research &amp; infrastructure security. Securing how research actually runs: CI/CD pipelines, automated research agents, multi-cloud compute, and code/data/model-weight handling.</li><li>
Corporate IT &amp; security. The endpoint, identity, and collaboration scaffolding a distributed research org runs on, in combination with the compliance frameworks that unlock lab partnerships.</li></ul>
This role focuses on the former, covering security on the technical side of the organization. You would report to senior leadership and work closely with our security and engineering teams (as well as with our operations team).
In practice, we expect to grow the security team one hire at a time, so your initial set of responsibilities is likely to span both areas. We expect the distinction to clarify over time.<h2 class="jobSectionHeader">
About the Role</h2>
You are the security architect for our research pipeline. You'll define how we securely conduct research across multiple cloud environments, partnering closely with engineering to make CI/CD, automated research agents, and large-scale compute secure by default. You would build a hardened environment where researchers and agents iterate at speed without risking data leakage, supply-chain compromise, and other security failures.<h2 class="jobSectionHeader">
Responsibilities</h2>
1. Secure DevSecOps &amp; CI/CD Orchestration<ul><li>
Pipeline Hardening: Build security guardrails directly into our CI/CD pipelines. Ensure that every deployment, whether manual or agent-driven, is automatically scanned, verified, and compliant.</li><li>
Automated Verification: Establish workflows where our agents can test their own code and infrastructure changes against security policies before deploying to production environments.</li><li>
Infrastructure as Code (IaC): Lead the implementation of &quot;Compliance as Code.&quot; Automate the auditing and enforcement of security configurations across our AWS, GCP &amp; neocloud footprints.</li></ul>
2. Supply Chain Security for Automated Research<ul><li>
Provenance and Integrity: In an environment where we rely heavily on automated coding agents, build systems to ensure the provenance of code and dependencies. Implement robust signing, SBOM (Software Bill of Materials) generation, and automated vulnerability management.</li><li>
Agent Sandbox Security: Define and enforce security models for our research agents. Ensure that agents have the &quot;least privilege&quot; access required to execute experiments while remaining isolated from sensitive IP and credentials.</li></ul>
3. Multi-Cloud Research Infrastructure<ul><li>
Compute Security: Manage the security architecture for our high-compute research environments. We operate in a multi-cloud ecosystem; you will be responsible for consistent, zero-trust network segmentation and identity management across disparate cloud providers.</li><li>
Research Data Protection: Develop and maintain the data handling protocols necessary for working with pre-publication research and potentially sensitive model weights.</li></ul>
4. Enabling Frontier Access<ul><li>
Compliance as a Competitive Advantage: Partner with AI labs to navigate security audits. You will bridge the gap between our &quot;move fast&quot; research culture and the high-bar security requirements of frontier model providers, turning compliance into an accelerator for our research agenda.</li></ul><h2 class="jobSectionHeader">
You May Be a Good Fit If You</h2><ul><li>
Are a seasoned security engineer who writes code, with deep experience in Terraform, Kubernetes, and CI/CD tools (GitHub Actions, GitLab CI).</li><li>
Have managed security across multiple cloud providers (AWS / GCP / neoclouds) and understand the nuance of securing ephemeral, high-compute research clusters.</li><li>
Take a pragmatic approach to modern software supply chains and understand the unique risks of AI-driven development and how to mitigate them without killing velocity.</li><li>
Understand the threat model of a high-value target for state-level actors and IP theft, and can build systems robust against sophisticated adversaries.</li><li>
Can explain complex security trade-offs to lead researchers and scientists, saying &quot;yes, safely&quot; rather than just &quot;no.&quot;</li><li>
Are willing to use AI tools aggressively in your own workflow, with appropriate care to not get fooled!</li><li>
Are motivated by alignment of artificial superintelligence (ASI) and want to contribute to it full-time.</li></ul><h2 class="jobSectionHeader">
Why This Role is Unique</h2>
At this organization, &quot;Corporate Security&quot; is a separate function. This role is focused on the Research Infrastructure. You will be working at the frontier of how automated alignment research is actually done. You will be building the security primitives for a new way of doing science: one where humans and machines collaborate to solve the most important problem of the 21st century.<h1 class="jobSectionHeader">
Logistics</h1>
Salary: Your salary depends on the scope, autonomy, and impact we expect you to have while working at Resolution. The expected range of in-person salaries for this role is:<ul><li>
L4 (SWE II): $346,000
</li><li>L5 (Senior SWE): $451,000
</li><li>L6 (Staff SWE): $670,000
</li><li>L7 (Senior Staff SWE): $930,000
</li></ul>We level using an internal adaptation of Google's standard levelling; the band above is indicative of where a strong candidate might come in.
Location: Berkeley, California. Remote may be considered in exceptional cases.
Benefits:<ul><li>
5 weeks of paid vacation per year, in addition to public holidays.</li><li>
Comprehensive healthcare insurance (medical, dental, vision).</li><li>
Unlimited sick leave to prioritize your well-being.</li><li>
An unconditional 401(k) contribution equal to 4% of your salary.</li></ul>
Visa sponsorship: We can sponsor visas for relocation to Berkeley.
Minimum education: A bachelor's degree in a field relevant to the role, or an equivalent combination of education, training, and/or professional experience that demonstrates comparable knowledge.
Deadline: Applications are rolling &mdash; please apply ASAP. We'll respond to applications within one week of receipt.
Start date: ASAP.
Compensation Range: $346K - $930K</div>

Security Engineer (Research Infrastructure)

Bridewell

<div>Start Date: 14th September 2026
About Bridewell
One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world&rsquo;s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.
Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.
The Opportunity
In the first three months of the Bridewell Academy, you will undergo comprehensive onboarding, where you will meet your manager and assigned buddy, who will guide you through the initial stages of your journey. During this period, you will gain exposure to our Cloud Engineering team, allowing you to familiarise yourself with cloud architecture, modern engineering practices, and the Microsoft 365 security stack &mdash; including Microsoft Defender (XDR), Microsoft Sentinel, and Microsoft Purview &mdash; alongside equivalent capabilities across other hyper-scalers. You will complete foundational training, such as the Microsoft Certified: Azure Fundamentals (AZ-900), Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), and AWS Certified Cloud Practitioner courses, and become acquainted with our learning management systems, setting a solid foundation for your professional development.
As you progress into the three to six-month mark, you will begin shadowing and contributing to client-facing cloud projects, where you'll apply your skills in real-world scenarios. This hands-on experience will be invaluable as you collaborate with senior consultants on deployments, configuration tasks, and technical documentation across Microsoft Azure, Microsoft 365, AWS, and GCP environments &mdash; with early exposure to security tooling such as Microsoft Defender, Microsoft Entra and Microsoft Sentinel.
Between six to eighteen months, you will continue working on client-facing projects both independently and as part of a squad, enhancing your practical experience in the field. During this time, you will focus on completing essential certifications such as:
<ul><li>Microsoft Certified: Azure Administrator Associate (AZ-104)</li><li>
Microsoft Certified: Security Operations Analyst Associate (SC-200)</li><li>
Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-401)
</li><li>Microsoft Certified: Cloud and AI Security Engineer (SC-500)</li><li>
AWS Certified Solutions Architect &ndash; Associate or Google Associate Cloud Engineer</li></ul>
Achieving these qualifications will further prepare you for your future role, culminating in your pathway to becoming academy certified. This structured progression ensures you are well-equipped with the knowledge and hands-on experience needed to thrive in a modern multi-cloud and cloud-security engineering career. 
Requirements 
Responsibilities<ul><li>
Support Client Engagements: Assist in the delivery of high-quality cloud engineering projects. Help clients design, deploy, and operate workloads across Microsoft Azure, Microsoft 365, AWS, and GCP, contributing to activities such as landing zone builds, identity and access configuration, network design, and the deployment and tuning of Microsoft Defender, Microsoft Sentinel, and Microsoft Purview alongside equivalent native security services in other clouds.</li><li>
Stay Informed: Actively engage in professional development by attending relevant training sessions, hackathons, vendor workshops (Microsoft, AWS, Google), and industry conferences to remain current with the latest cloud services, security tooling, architectural patterns, and engineering best practices.</li><li>
Collaborate with Consultants: Work closely with senior cloud and security engineers on project tasks &mdash; helping to gather requirements, build proofs-of-concept, author detections and analytics rules in Sentinel, configure Defender policies, script automation (e.g. PowerShell, KQL, Bicep, Terraform, ARM, CloudFormation), and prepare technical documentation to ensure project objectives are met efficiently and effectively.</li><li>
Participate in Team Meetings: Join regular squad stand-ups, design reviews, and retrospectives to discuss project progress, share insights, and gather feedback, fostering a collaborative engineering culture and enhancing your personal learning.</li><li>
Conduct Technical Research: Help with preliminary research on emerging cloud and security services, reference architectures, and comparative analysis between vendors (Azure/M365 vs. AWS vs. GCP) to support project work and internal capability development.</li><li>
Engage with Clients: Participate in client meetings, technical workshops, and whiteboarding sessions as needed, providing support and gathering information to understand client requirements and contribute to high-quality service delivery.</li></ul>
Experience<ul><li>
A degree in Computer Science, Cloud Computing, Cyber Security, an equivalent qualification, or completion of a cloud/engineering-focused training course or bootcamp.</li><li>
Minimum grade of 4/C in GCSE English Language and Maths (or equivalent).</li><li>
Three A-levels or five Highers (or equivalent).</li><li>
No work experience is needed as this is an entry-level position. We are looking for someone who will show potential for these roles through their transferable skills. Curiosity about cloud and security technology, confidence, relationship building, and a self-starter mentality are all welcome &mdash; alongside a huge eagerness to learn and build!</li></ul> 

Benefits 
Why join us?
Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn&rsquo;t end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:
<ul><li>25 Days Holiday - Plus buy and sell options
</li><li>Flexible Working (around core office hours)
</li><li>Company Pension
</li><li>Employee Shareholder Scheme
</li><li>Personal Day &amp; Birthday Off - After 1 year of service
</li><li>Family Leave &ndash; After 1 year of service
</li><li>Life Assurance
</li><li>Electric Vehicle Scheme &amp; Cycle to Work Scheme</li><li>
Private Healthcare (incl. Gym discounts and vison care)</li></ul>
Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion, in particular our London office.
Note: To be eligible for this job you must either hold UK Security Clearance or be eligible and willing to go through this security clearance Bridewell values diversity and is an equal opportunity employer. We are dedicated to fostering an inclusive environment where all employees feel respected, supported, and empowered to do their best work. If you require any reasonable adjustments throughout the interview process please let us know.</div>

Academy Cloud Security Consultant

Accenture

<div>YOU ARE
As a hands-on Infrastructure architect, you are an early-career engineer who learns and grows while contributing hands-on to the AI and machine learning infrastructure that powers real-world applications. Under the guidance of senior architects and engineers, you'll develop practical skills in coding, testing, configuring, deploying, monitoring, and troubleshooting AI systems and the infrastructure they run on. Day to day, you'll write and test code and deployment scripts, help configure cloud and on-premises compute resources such as GPU clusters and distributed training environments, deploy AI systems and models into production, and support data pipelines that feed AI and ML workflows. You'll learn to monitor AI systems and infrastructure health across both InfraOps and MLOps disciplines, perform AI monitoring to track model and system performance, and troubleshoot issues across the computational stack with mentorship and support. This is a hands-on, learning-focused where you build expertise across modern tools and platforms &mdash; including container orchestration, model serving, CI/CD pipelines, InfraOps, MLOps, and AI monitoring &mdash; while making meaningful contributions to infrastructure that enables AI-driven busin
ess outcomes.
THE WORK<ul><li>
Write, test, and debug code and scripts for AI infrastructure tasks, including automation and tooling, under the guidance of senior engineers.</li><li>
Develop and maintain infrastructure and software deployment scripts to support reliable, repeatable releases of AI systems and models.</li><li>
Configure and provision compute resources across cloud and on-premises environments, including GPU clusters and distributed training setups.</li><li>
Deploy AI systems and machine learning models into production infrastructure, following established processes and best practices.</li><li>
Deploy data pipelines that feed AI and ML workflows, ensuring data is available, clean, and reliable.</li><li>
Assist with container orchestration and model serving, learning tools such as Docker, Kubernetes, and model deployment frameworks.</li><li>
Support and maintain CI/CD pipelines for automating the build, test, and deployment of AI infrastructure and applications.</li><li>
Monitor AI systems and infrastructure health across InfraOps and MLOps disciplines, tracking performance, reliability, and resource utilization.</li><li>
Perform AI monitoring to track model performance, detect drift or degradation, and surface issues for review.</li><li>
Troubleshoot and help resolve issues across the computational stack &mdash; hardware, networking, software, and models &mdash; with mentorship and support.</li><li>
Document configurations, processes, and procedures to maintain clear, repeatable, and shareable knowledge across the team.</li><li>
Collaborate with senior architects and engineers, participating in code reviews, team discussions, and knowledge-sharing sessions to grow technical skills.</li><li>
Apply security, cost-efficiency, and scalability best practices as you learn them, contributing to well-managed and responsible infrastructure.</li></ul></div>
 
<div>EDUCATION<ul><li>
Bachelor's Degree in Computer Science, Computer Engineering, related Engineering field</li></ul>
BASIC (REQUIRED) QUALIFICATION<ul><li>
Work or coursework experience with AI/ML or Computer engineering or Computer science.</li><li>
Coding, building, monitoring, troubleshooting applications of AI/ML models; selecting, designing and infrastructure for deploying and running them on premise or on public cloud.</li><li>
Strong understanding of AI and machine learning as a subject.</li><li>
Strong understanding of computing infrastructure a subject, preferred knowledge of AI infrastructure.</li><li>
Proficiency in programming languages such as Python, Java, or C++.</li></ul></div>

AI Infrastructure Architecture Analyst

Explore 191+ Security architect in London this July. Find roles across top companies and apply now to boost your career.