About Refractal

Refractal is an AI security company building the infrastructure organisations need to defend against autonomous AI threats. 2026 has shown that generally capable intelligence is here. The challenge now is modernising security to stop AI-enabled threats, whether they come from internal agents going rogue or from attackers using AI to become more dangerous.

Refractal was founded on cybersecurity and AI expertise from MIT, Microsoft, NASA and the U.S. Navy. Our product lets organisations detect AI-enabled threats at low cost without sacrificing detection quality. We take a practical approach to AI risk, combining proven cybersecurity methods with frontier AI security research.

Today, we work with governments and organisations that can't afford to get security wrong. We're backed by leading deep-tech and cybersecurity investors and are growing the team to deliver on this mission.

The role

You'll own how Refractal is built, released and deployed, including our release pipeline, our cloud infrastructure and the packaging that lets regulated customers run Refractal in their own environments. You'll work alongside our Systems Engineer, who is responsible for the production runtime.

What you'll do

Run and harden our Google Cloud production estate as infrastructure as code.
Build CI/CD with signed artefacts, supply-chain verification and fast, safe releases.
Package Refractal for customer-hosted and private-cloud deployments that pass enterprise security reviews.
Own secrets management, key rotation, environment isolation and on-call observability.
Automate the security controls and audit evidence behind our own compliance programme.

Success in your first six months

Releases are automated, signed and easy to roll back.
Customers can run Refractal in their own environments using packaging you built.
Our infrastructure is fully codified, monitored and documented.

About you: essential

6+ years in DevOps, SRE or infrastructure engineering, owning production systems.
Deep experience with Terraform or similar, containers and Kubernetes.
Strong Google Cloud or AWS experience, including network and IAM design.
Experience with CI/CD and software supply-chain security, including SBOMs, signing and provenance.
Python or Go for automation.

Nice to have

Experience deploying into financial-services or other regulated environments.
Familiarity with operational-resilience requirements such as DORA.

Our values

Radical transparency. We believe the best work happens when everyone feels able to give and receive honest, constructive feedback.

Public service. We see AI security as a form of public service. Getting the AI transition right means putting the right infrastructure in place to manage the threats that come with it, and our work helps protect the institutions and services society depends on.

Fail fast. We test ideas early, seek feedback and learn quickly. We experiment rapidly and change course when something isn't working, without compromising on security.

Pragmatism, not dogmatism. We choose approaches based on how well they solve the problem. That means combining established cybersecurity methods with frontier AI research, questioning our assumptions, and changing our minds when the evidence changes.

Compensation and benefits

Salary: £85,000–£140,000
Competitive equity to share in Refractal's growth
Pension contribution
Private medical and dental cover
Visa and relocation support

Compensation: £85K – £140K • Offers Equity

• £85K – £140K • Offers Equity