The MTS Lead for Product Security is responsible for building, scaling, and operating Reflection’s security program across the full breadth of the enterprise — from physical and data center infrastructure to cloud and neocloud environments, vendor ecosystems, and strategic growth activities. This lead serves as a senior partner to the CISO, translating the company’s long-term security strategy into an operating model that can withstand hypergrowth and the unique demands of a frontier AI company.
Sitting at the intersection of infrastructure security, enterprise operations, and strategic risk, this role is uniquely positioned to shape how Reflection understands and manages its security posture as it scales. The ideal candidate is both a strategic architect and a hands-on operator — equally capable of defining security standards for neocloud environments and standing up physical controls for a new data center deployment. They bring deep technical fluency across cloud, infrastructure, and AI compute environments, and the executive presence to represent Reflection’s security posture to customers, regulators, investors, and government stakeholders.
This is a high-visibility, high-impact role with broad organizational reach. Success requires the ability to build security programs from scratch, scale them through periods of rapid change, and maintain operational excellence across a complex, globally distributed technology footprint.
Senior CISO Partnership & Security Strategy
Help define and execute the company’s long-term security strategy and security operating model.
Support the CISO and CSO in representing security leadership with customers, auditors, investors, regulators, government officials, and executive stakeholders.
Recruit, develop, and mentor world-class security and technology professionals.
Balance strategic leadership with hands-on execution as organizational needs evolve.
Data Center & Physical Security
Own security strategy for data centers, colocation facilities, and infrastructure operations globally.
Partner with infrastructure and site operations teams to embed security throughout the data center lifecycle, including site selection, design, commissioning, and operations.
Define standards for physical access controls, surveillance systems, asset protection, hardware handling, and operational resilience.
12+ years of experience across cybersecurity, infrastructure security, enterprise technology, or related fields.
Proven track record of building security programs from the ground up within startups, AI companies, cloud providers, hyperscalers, or hypergrowth technology organizations.
Demonstrated success scaling teams and organizations from 0→1 and 1→N.
Experience securing AI infrastructure and running security operations for GPU compute environments.
Experience working within or alongside neocloud providers, hyperscalers, colocation operators, or large-scale physical cloud infrastructure organizations.
Experience leading vendor risk programs, procurement security reviews, and legal contract negotiations.
Familiarity supporting SOC 2, ISO 27001, FedRAMP, ISO 22237, ISO 22301, NIST CSF, customer audits, and enterprise security reviews.
Skills & Capabilities
Technical depth across cloud and infrastructure security, Kubernetes and container security, Zero Trust architectures, identity and access management, detection and response technologies, and security automation and orchestration.
Ability to design and communicate security standards, architecture decisions, and risk trade-offs to both technical and non-technical audiences.
Strong operational judgment — capable of defining security policy and implementing controls directly when organizational needs require it.
