Security Engineer (Corporate IT)

Responsibilities

The role involves building and owning the Corporate IT and Security function to protect sensitive research and enable secure partnerships. Responsibilities include implementing Zero-Trust architecture, managing identity lifecycles, and ensuring compliance with external security standards.

Requirements

Candidates should be hands-on operators with a technical background in building IT or security functions from scratch. Proficiency in compliance frameworks and the ability to translate technical security requirements for non-technical stakeholders are essential.

Skills

• Identity and Access Management
• Zero-Trust architecture
• Security architecture
• Compliance frameworks
• SOC 2
• ISO 27001
• Email security
• Phishing protection
• Infrastructure security
• Scripting
• Automation
• Risk management
• Strategic leadership
• System configuration

Benefits

• 5 weeks of paid vacation
• Comprehensive healthcare insurance
• Unlimited sick leave
• 4% 401(k) contribution

About this role

About Resolution
Resolution does research on how to align artificial superintelligence (ASI). ASI may be developed in the next few years, but it is unclear whether alignment is on track to be ready in the same timeframe. We aim at higher a priori confidence in aligned outcomes by pursuing a portfolio of theory and empirics bets, any one of which — if it succeeds — would meaningfully advance the field. We invest heavily in research automation to accelerate progress, and we believe that stronger alignment theory unlocks higher automation: more principled approaches give us better filters for which directions of automated research are promising.
Resolution was founded in 2026 by researchers from UK AISI's Alignment Team, who ran the £30m Alignment Project, and Timaeus, who pioneered applying singular learning theory to alignment.
For more information, see our announcement.
About the Team
Resolution's work will involve sensitive frontier-relevant research and partnerships with AI labs. This role exists both to protect that work and to enable it: good security is what makes deeper lab partnerships possible. We draw a distinction between two closely related areas of security:
Research & infrastructure security. Securing how research actually runs: CI/CD pipelines, automated research agents, multi-cloud compute, and code/data/model-weight handling.
Corporate IT & security. The endpoint, identity, and collaboration scaffolding a distributed research org runs on, in combination with the compliance frameworks that unlock lab partnerships.
This role focuses on the latter, covering security on the operational side of the organization. You would report to senior leadership and work closely with our security and operations teams (as well as with our engineering team).
In practice, we expect to grow the security team one hire at a time, so your initial set of responsibilities is likely to span both areas. We expect the distinction to clarify over time.
About the Role
We are looking for a hands-on, strategic leader to build and own our Corporate IT and Security function from the ground up. As we scale from our current team to 40–60 FTEs over the next two years, you will be the single point of accountability for ensuring our researchers have the tools they need to move fast while maintaining a security posture that earns the trust of external partners and AI labs.
We are looking for a builder, not just a manager. You should be comfortable getting into the weeds of configuration and implementation, but you understand that your ultimate goal is to enable world-class research through secure infrastructure.
Responsibilities
1. Identity and Access Management (IAM)
Implement a robust Zero-Trust architecture. You will define the lifecycle of identities for our staff, collaborators, and automated research agents.
Ensure rigorous access control management, balancing the open-science nature of our publication goals with the extreme sensitivity of our pre-publication research and model access requirements.
2. Communications and Email Security
Secure our communication channels. As an organization that may become a high-value target for state actors and competitive intelligence gathering, you will implement advanced email security, phishing protection, and secure collaborative workflows.
3. Security Architecture as an Enabler
Act as the primary bridge between our research needs and the security requirements of external AI labs.
Help us navigate the security audits required to gain and maintain access to frontier models, turning compliance into an accelerator for our research agenda.
You May Be a Good Fit If You
Are a hands-on operator with a technical background and are comfortable configuring systems, scripting automation, and personally setting up the stack.
Understand the threat model of a high-stakes research organization and can balance extreme security with an AI lab's "move fast" requirements.
Have built an IT and/or security function from scratch and can operate with autonomy and ambiguity in an early-stage org.
Can translate technical security requirements into plain English for researchers, theorists, and leadership.
Are familiar with compliance frameworks (SOC 2, ISO 27001) and partner-lab security requirements.
Are willing to use AI tools aggressively in your own workflow, with appropriate care to not get fooled!
Are motivated by alignment of artificial superintelligence (ASI) and want to contribute to it full-time.
Why This Role is Unique
At most organizations, IT and Security are viewed as overhead. Here, your work is a core component of the research strategy. By securing our operations, you enable the collaboration and external partnerships that allow our researchers to access sensitive models and data to accelerate progress. You will help define the operational security standards for a new generation of AI safety organizations.
Application Process
Application review. Every application gets at least one human review.
CodeSignal (45 minutes, in two sections). A security-specific assessment, not LeetCode and not a general coding test: it involves very little writing code by hand, and leans instead on code review and written responses to scenarios like diagnosing failures in an IAM configuration. We want the content of our assessments to have at least some overlap with the things we expect you to do in real life.
Screening call (15 minutes). An informal chat, where we briefly cover background, fit, and motivation.
Technical and experience interviews (about 2-3 hours in total, across two or three sessions). We're still settling the exact shape of these for this role, and we'll tell you the format before each session. Expect some combination of: a technical interview on reading and diagnosing unfamiliar infrastructure, without AI assistance; a technical interview in two parts, an AI-unassisted design and specification problem followed by an AI-assisted implementation of it; and an experience interview walki...

About Resolution

Research Services · 11-50 employees · headquartered in Berkeley, California · founded 2026