MTS Lead Product Security
Reflection is an AI research lab building open frontier models and a full AI stack for developers, enterprises, and public-sector users.
Funding history
About Reflection
Reflection develops open-weight AI models, open-source software for customizing and running agents, AI-factory infrastructure, and related solutions. Its current research emphasizes large language models, reinforcement learning, and agentic reasoning.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will build and scale security programs spanning physical infrastructure, data centers, cloud and neocloud environments, vendors, and strategic initiatives. You will define security standards, assess risks, lead vendor and acquisition diligence, and support security leadership with external stakeholders.
Requirements
- 12+ years of experience in cybersecurity, infrastructure security, enterprise technology, or related fields
- Experience building security programs from the ground up
- Experience scaling security teams and organizations
- Experience securing AI infrastructure and GPU compute environments
- Experience with neocloud providers, hyperscalers, colocation operators, or physical cloud infrastructure
- Experience leading vendor risk programs, procurement security reviews, and contract negotiations
- Familiarity with SOC 2, ISO 27001, FedRAMP, ISO 22237, ISO 22301, and NIST CSF
- Knowledge of cloud, infrastructure, Kubernetes, container, Zero Trust, IAM, detection, response, automation, and orchestration security
Responsibilities
- Help define and execute the long-term security strategy and operating model
- Support security leadership with customers, auditors, investors, regulators, government officials, and executives
- Recruit, develop, and mentor security and technology professionals
- Own security strategy for data centers, colocation facilities, and infrastructure operations
- Define physical access, surveillance, asset-protection, hardware-handling, and resilience standards
- Own neocloud security strategy, configuration requirements, and governance
- Develop and enforce security standards for third-party neocloud environments
- Lead technical assessments of neocloud deployments and drive remediation
- Lead security contractual negotiations with neocloud providers
- Lead security and technology due diligence for acquisitions, investments, and partnerships
- Drive post-acquisition security integration and modernization
- Build vendor security assessment and third-party risk management programs
- Partner on security, privacy, and risk-transfer contract terms
Benefits
- Stock options
- Comprehensive medical, dental, vision, and life insurance
- Annual wellness allowance
- Daily office lunch and dinner
- 22 weeks of paid parental leave
- Unlimited paid time off in the U.S.
- 30 days of paid time off in the U.K.
- Visa sponsorship support
- Regular off-sites, happy hours, and team celebrations