Latest AI JobsBrowse Jobs
SASH logo

Research Engineer / Research Scientist, Confidential Computing

SASHRemote/FlexibleVerification
Apply on company site
Salary
$100K – $200K
Job type
Full-time
Work mode
Remote
Experience
Mid
Posted
22 Sept 2026
Status
Open · checked 7d ago

About this role

SASH seeks a Research Engineer or Research Scientist for a remote or flexible position that suits professionals experienced in confidential computing, hardware enclaves, or systems security. This role focuses on building and testing verification tools for AI agreements through hardware attestation and secure computing methods.

Role Overview

The Research Engineer or Research Scientist position at SASH involves determining the validity of hardware attestations on accelerators, building verifiable registries, and creating attested pipelines resistant to adversarial attacks. Located remotely with flexibility for Singapore, the UK, or other remote regions, the position requires collaborating with cryptographers, hardware-security colleagues, and policymakers to establish trust mechanisms for AI datacenters.

Key Responsibilities

Establish what GPU confidential-computing attestation guarantees on current hardware and identify where it breaks.
Design and construct an independent registry encompassing attested-result formats, third-party audit submission paths, and verification clients.
Build attested logging inside enclaves and evaluate privacy-preserving audits over those logs.
Execute end-to-end evaluations under mutual secrecy utilizing attestations for code and weights.
Chain attestations across pipelines to maintain checkability from outputs to inputs under production loads.
Deploy confidential-computing stacks across accelerators from multiple supply chains.
Integrate hardware attestation with internal cryptographic operations to reduce sole reliance on chip trust.
Red-team internal attestation chains and publish findings.

Requirements

Experience building systems with confidential computing or hardware enclaves like SGX, TDX, SEV-SNP, Arm CCA, or GPU confidential computing, or alternatively strong systems security fundamentals with a willingness to learn.
Solid understanding of attestation chains and their practical limitations.
Capability to ship integrations across organizational boundaries.
Ability to operate effectively in ambiguous, early-stage environments.

Nice to Have

Background in machine learning inference serving and production deployment operations.
Experience in audit, certification, or public key infrastructure (PKI).
Knowledge of privacy-preserving computation techniques including secure computation, differential privacy, and federated setups.
Familiarity with AI evaluations landscapes and safety institute requirements.
Experience explaining hardware guarantees to non-technical stakeholders.

Skills and Tools

Hardware enclaves (SGX, TDX, SEV-SNP, Arm CCA, GPU confidential computing)
Public key infrastructure (PKI)
Privacy-preserving computation
Machine learning inference serving

Salary and Benefits

Compensation ranges from $100K to $200K, adjusted based on location, experience, and level, with higher salaries possible for exceptional candidates.
Competitive benefits and leave policies.

About the Company

SASH operates a Verification team that builds and tests tools for verifying agreements about AI, prototyping verification mechanisms, leading international research collaborations, and interacting with global policymakers. The technical team is led by Associate Professor Pascal Berrang from the University of Birmingham and includes individuals with experience from the Singapore Government, Oxford, and the Centre for the Governance of AI.

How to Apply

Candidates should apply directly on the official company careers page.

Skills and tech stack

Questions candidates ask

Where is the position located?

This is a remote role that can be based in Singapore, the UK, or remotely, with required working-hour overlap with globally distributed colleagues.

Is visa sponsorship available?

Yes, SASH provides visa sponsorship in the UK for candidates interested in relocating.

What is the salary range for this role?

The compensation ranges from $100K to $200K, taking location, experience, and level into account, with higher salaries potentially available for exceptional candidates.

What qualifications are required if I have not worked with hardware enclaves before?

Candidates with strong systems security fundamentals who are willing to learn confidential computing and hardware enclaves on the job may also be a good fit.

Will I be expected to publish my work?

Yes, publishing is expected because the verification approach relies on external parties being able to check the results.

Ready to apply?

The application is on the official SASH careers page.

Apply on company site