Member of Technical Staff - Security

OWN YOUR INTELLIGENCE Prime Intellect is building the open superintelligence stack: the infrastructure frontier AI labs build internally, made available to every ambitious AI team. Our platform, Lab, unifies compute, environments, evaluations, secure sandboxes, high-performance training, and deployment into one full-stack system for post-training at frontier scale - from SFT and RL to tool use, agent workflows, and continuously improving production models. We are building open frontier AI: open-source models trained end to end for long-horizon tasks like autonomous research, and the full-stack platform our own research team uses to build them. The next generation of AI companies, enterprises, and research teams do not just need more GPUs. They need the ability to turn their own workflows, tools, data, and feedback loops into superintelligence they own. Prime Intellect has raised $150M in total funding from Founders Fund, Radical Ventures, NVIDIA, and exceptional AI, infrastructure, and enterprise operators — including Andrej Karpathy, Dwarkesh Patel, and leaders and founders from Ramp, Perplexity, Harvey, Mercor, Zapier, Datadog, Cognition, OpenAI, Thinking Machines, Together AI, SemiAnalysis, LangChain, Browserbase, Cloudflare, Sierra, Databricks, Airbnb, OpenRouter, Standard Intelligence, Fleet, Core Auto, and more. We are looking for people who want to build at the intersection of frontier research, real infrastructure, and go-to-market for a category that does not fully exist yet. ROLE IMPACT Security is the single highest-stakes function at Prime Intellect. Our customers — from frontier AI labs to enterprises — trust us with their most valuable assets: proprietary models, training data, and the compute that powers them. This role owns the security posture of everything we ship: the hosted RL training platform, distributed GPU infrastructure, liquid compute marketplace, and all customer-facing surfaces. You'll be the first dedicated security hire and will define how we think about security as a company — from threat modeling and secure architecture to incident response and compliance. You'll work directly with engineering, research, and leadership to embed security into every layer of the stack, and you'll manage relationships with external penetration testers and security auditors to continuously validate our defenses. CORE TECHNICAL RESPONSIBILITIES PREVENTIVE SECURITY & SECURE ARCHITECTURE - Own threat modeling across our entire surface area: multi-tenant training infrastructure, sandboxed execution environments, API surfaces, and internal tooling - Design and implement zero-trust networking, identity, and access control across distributed GPU clusters and cloud infrastructure - Build secure-by-default patterns for our platform engineers — auth, secrets management, supply chain integrity, container hardening - Architect tenant isolation and data boundary enforcement for hosted RL training workloads (customers run arbitrary code in our environments) AI-NATIVE SECURITY - Develop security frameworks specific to AI infrastructure: model weight protection, training data isolation, checkpoint integrity, gradient privacy - Secure the RL training loop end-to-end — from environment execution in sandboxes to reward signal verification and model artifact storage - Build detection and prevention for AI-specific attack vectors: prompt injection across agentic pipelines, model exfiltration, adversarial environment manipulation OFFENSIVE SECURITY & EXTERNAL ENGAGEMENTS - Scope, manage, and run point on external penetration tests across our platform, hosted training infrastructure, and liquid compute layer - Build and maintain an internal red-teaming practice — automated and manual — targeting our most critical systems - Drive vulnerability management: triage, remediation SLAs, and root cause analysis DETECTION, RESPONSE & OBSERVABILITY - Build security monitoring and alerting across infrastructure (distributed clusters, Kubernetes, cloud) and application layers - Implement runtime security for containerized training workloads and sandboxed environments - Own incident response — build the playbooks, run the drills, lead the post-mortems - Design audit logging and forensic capability across all customer-facing systems COMPLIANCE & CUSTOMER TRUST - Drive SOC 2 Type II readiness and other compliance frameworks required by enterprise customers - Own the security narrative for customer-facing materials — questionnaires, architecture reviews, trust documentation - Partner with GTM to unblock enterprise deals that depend on security posture TECHNICAL REQUIREMENTS - 5+ years in security engineering, infrastructure security, or offensive security roles — ideally at companies operating multi-tenant cloud or compute infrastructure - Deep experience with cloud security (GCP preferred), Kubernetes security, and container runtime hardening