← Search all jobs

Head of Safety

Cognition

San Francisco, CA · Posted October 9, 2026

Just laid off? Start here: a plan for the first weeks

Want recruiters in Research to be able to find you?

Roles at this level, like this one at Cognition, are often filled through recruiters.

See every open role at Cognition

More in California job market · Technology & Software · Research jobs

More roles at Cognition

Similar jobs

Where San Francisco, CA ranks

Where San Francisco, CA placed in our monthly rankings, month by month. Each month stays online at its own address.

How AI is used in this kind of work

AI use among managers, all other is little observed so far. Measured exposure for managers, all other: 7% (little observed).

Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.

Check how this applies to your own job

Skills this job asks for

Say which you have and which you want to build. We use it to match you to jobs like this one.

About the job

WE ARE AN APPLIED AI LAB BUILDING END-TO-END SOFTWARE AGENTS.

We're the makers of Devin, the first AI software engineer.

Our team is extremely talent-dense. Among our founding team, we have world-class competitive programmers, former founders, and leaders from companies at the cutting edge of AI including Scale AI, Palantir, Cursor, Waymo, Tesla, Lunchclub, Modal, Google DeepMind, and Nuro.

Building Devin is just the first step—our hardest challenges still lie ahead. If you’re excited to solve some of the world’s biggest problems and build AI that can reason on real-world tasks, apply to join us.

ROLE MISSION

Devin is one of the most capable autonomous agents in production. It writes and runs code, uses tools, takes actions in real customer systems, and operates for hours without a human in the loop. That makes it one of the most important places in the industry to get safety right, and one of the few where safety work ships to millions of developers rather than staying in a paper. You will build Cognition's safety function from the ground up: the research agenda, the evaluation and red-teaming program, the deployment policies, and the team. You will work directly with the researchers training our models and the engineers building the agent harness. This is a hands-on role for someone who has done serious safety or alignment work at a frontier lab and wants to apply it where agents actually operate.

WHAT YOU'LL ACCOMPLISH

- Own safety end to end: Set the safety strategy for Devin and the models behind it, and own the outcomes.

- Build the evaluation program: Design evals and red-teaming for agentic risk: unsafe actions, prompt injection, data exfiltration, sandbox escape, reward hacking, and misuse. Make them part of every model and product release.

- Shape training and the agent harness: Partner with pre-training, post-training, and agent teams so safety is built into how models are trained and how Devin plans, acts, and asks for help.

- Set deployment policy: Define what Devin is and is not allowed to do, how permissions and oversight work, and how we handle the gray areas, in a way that holds up with enterprise customers.

- Build the team and the external voice: Hire and lead safety researchers and engineers. Represent Cognition's safety work with customers, policymakers, and the broader research community.

EXCEPTIONAL CANDIDATES HAVE DEMONSTRATED

- Frontier lab safety or alignment experience: Hands-on work on safety, alignment, evaluations, or red-teaming at a frontier AI lab. You have shipped safety work that affected real models or products.

- Agentic systems depth: You understand how agents fail in practice: tool misuse, specification gaming, long-horizon drift, adversarial inputs. You have ideas about how to measure and mitigate it.

- Research credibility: A track record of published or widely used safety research, evals, or methods. An advanced degree in Computer Science, Machine Learning, or a related field is a plus.

- Technical fluency: Comfortable in Python and in the training and inference stack. You can read the code, run the evals, and argue with researchers on the details.

- Builder, not reviewer: You have started or scaled a safety function and prefer shipping mitigations to writing memos about them.

- Judgment under uncertainty: You can make clear calls on deployment risk with incomplete information and explain them to engineers, executives, and customers.

OUR COMMITMENT

Equal Opportunity. Cognition is an equal opportunity employer. We do not discriminate on the basis of any protected characteristic under applicable law. We are committed to providing reasonable accommodations for candidates with disabilities throughout the hiring process - please let us know if you need any. Cognition also considers applicants with criminal histories consistent with the SF Fair Chance Ordinance and similar local laws.

Data Privacy and Arbitration: By submitting your application, you agree to our Global Applicant and Job Candidate Privacy Notice https://cognition.com/documents/Cognition-Global-Applicant-and-Job-Candidate-Privacy-Notice.pdf. For US applicants, by submitting your application, you agree to the Applicant Arbitration Agreement https://cognition.com/documents/Cognition-Applicant-Arbitration-Agreement.pdf.