About the role

THE ROLE Lucid Computing https://lucidcomputing.ai/, in partnership with the Research Institutes of Sweden (RISE), is building and operating an adversarial testbed https://lucidcomputing.substack.com/p/building-an-adversarial-testbed-for for developing and red-teaming AI compute verification solutions. The premise of the project is that verification claims — where AI compute runs, how it is used, what model is loaded — are only as good as the adversarial attacks they can withstand. Our job is to build verification solutions that can survive such attacks. Every solution ultimately rests on a physical and operational security foundation. Components like network taps, randomized inference routers, TEEs and assurance nodes are all in-path devices whose guarantees evaporate if an adversary can bypass, substitute, or tamper with them — or simply walk undeclared hardware into the room. Physical security is a prerequisite: cameras, custom server enclosures, tamper-evident mechanisms, random spot inspections, countermeasures against undeclared wireless components, controlled installation and maintenance procedures, and chain-of-custody for every security-relevant device are all in-scope. The successful candidate will collaborate with the rest of the team to utilize components like these to develop the physical security layer of our team’s verification designs. This is not a conventional data center security job. You will not be running a badge program or maintaining a compliance checklist against a static standard. You will be designing security protocols for a threat model most facilities never contemplate — a well-resourced, covert adversary who may be the facility operator themselves — and then watching a highly-sophisticated, independent red team try to break what you built, with the results published either way, negative findings included. The end goal of this work is to produce technical verification designs that can enable nation-states and AI companies to coordinate around policies and standards that support AI security at a global scale. The role will reward candidates who find that prospect energizing. WHAT YOU'LL DO At the design level, you will be the physical and operational security voice inside a multidisciplinary team of hardware engineers, network engineers, cryptographers, ML researchers, and governance researchers. When the team debates a new verification architecture, you are the person who asks how the network devices are installed without a trusted installer, how we detect a hidden NIC inside a GPU server, what an inspection regime for declared local storage actually looks like in practice, and what it costs. You will contribute original security designs of your own — we expect the successful candidate to invent, not just review. At the physical level, you will implement and operate these protocols in real experiments on a real-world GPU cluster, overseeing secure installation of in-path verification devices alongside live workloads. The installation-assurance documentation, inspection methodologies, and physical threat models you produce will be published as part of an open reference architecture, intended to inform how governments and AI labs approach verification. You should be excited to have your work scrutinized publicly and improved by that scrutiny. REQUIRED SKILLS & BACKGROUND - Hands-on experience securing operational AI/GPU data centers. You have designed, implemented, or run physical and operational security for facilities hosting large-scale accelerated compute. - Deep expertise in physical security controls and operations: access control and zoning, surveillance and camera coverage design, intrusion detection, tamper-evident seals and enclosures, secure racks/cages, visitor and vendor escort procedures, and guard/inspection operations. - Threat modeling against sophisticated adversaries, including insider threats and well-resourced external actors. - Working fluency in data