Refractal is an AI security company building the infrastructure organisations need to defend against autonomous AI threats. 2026 has shown that generally capable intelligence is here. The challenge now is modernising security to stop AI-enabled threats, whether they come from internal agents going rogue or from attackers using AI to become more dangerous.
Refractal was founded on cybersecurity and AI expertise from MIT, Microsoft, NASA and the U.S. Navy. Our product lets organisations detect AI-enabled threats at low cost without sacrificing detection quality. We take a practical approach to AI risk, combining proven cybersecurity methods with frontier AI security research.
Today, we work with governments and organisations that can't afford to get security wrong. We're backed by leading deep-tech and cybersecurity investors and are growing the team to deliver on this mission.
The roleYou'll own the infrastructure that runs Refractal, both in our production environment and in customers' own environments, including our delivery pipeline, deployment tooling and the security controls the product depends on.
What you'll doRun and harden our Google Cloud production estate as infrastructure as code.
Build CI/CD with signed artefacts, supply-chain verification and fast, safe releases.
Package Refractal for customer-hosted and private-cloud deployments, including on-premises installations.
Own secrets management, key rotation, environment isolation and on-call observability.
Automate the security controls and audit evidence behind our own compliance programme.
Releases are automated, signed and easy to roll back.
Customers can run Refractal in their own environments using packaging you built.
Our infrastructure is fully codified, monitored and documented.
6+ years in DevOps, SRE or infrastructure engineering, owning production systems.
Deep experience with Terraform or similar, containers and Kubernetes.
Strong Google Cloud or AWS experience, including network and IAM design.
Experience with CI/CD and software supply-chain security, including SBOMs, signing and provenance.
Python or Go for automation.
Experience deploying into on-premises or highly restricted customer environments.
Montenegrin, Serbian, Bosnian or Croatian.
Radical transparency. We believe the best work happens when everyone feels able to give and receive honest, constructive feedback.
Public service. We see AI security as a form of public service. Getting the AI transition right means putting the right infrastructure in place to manage the threats that come with it, and our work helps protect the institutions and services society depends on.
Fail fast. We test ideas early, seek feedback and learn quickly. We experiment rapidly and change course when something isn't working, without compromising on security.
Pragmatism, not dogmatism. We choose approaches based on how well they solve the problem. That means combining established cybersecurity methods with frontier AI research, questioning our assumptions, and changing our minds when the evidence changes.
Compensation and benefitsSalary: €35,000–€85,000 gross per year
Competitive equity to share in Refractal's growth
Pension contribution
Private medical and dental cover
Visa and relocation support
Skills Required
- 6+ years of experience in DevOps, SRE, or infrastructure engineering owning production systems
- Deep experience with Terraform or similar infrastructure-as-code tools
- Experience with containers and Kubernetes
- Strong Google Cloud or AWS experience
- Experience designing cloud networks and IAM
- Experience with CI/CD and software supply-chain security
- Experience with SBOMs, artifact signing, and provenance
- Python or Go experience for automation
- Experience deploying to on-premises or highly restricted customer environments
- Montenegrin, Serbian, Bosnian, or Croatian language skills
What We Do
Refractal builds security infrastructure for high-assurance AI, helping governments and enterprises test AI agents before deployment, protect them in production, and meet compliance requirements. Its software monitors agent activity and enforces policies at the point of action, evaluating tool calls and data access and recording tamper-evident audit trails. The platform integrates with existing telemetry and observability tools and helps detect AI-enabled threats across models, tools, and workflows.
