--- title: 'IT Security & Identity Engineer at Neuralink' canonical: 'https://feeny.ai/job/it-security-identity-engineer-neuralink-austin-nc1az5gby8wd' type: 'job' last_seen: '2026-10-16' --- # IT Security & Identity Engineer at Neuralink - **Company:** Neuralink - **Location:** Austin, TX - **Compensation:** $99k–$185k - **Posted:** 2026-09-25 - **Last confirmed live:** 2026-10-16 - **Apply:** https://boards.greenhouse.io/neuralink/jobs/8005649003?gh_jid=8005649003 ## Job description About Neuralink: We are creating devices that enable a bi-directional interface with the brain. These devices allow us to restore movement to the paralyzed, restore sight to the blind, and revolutionize how humans interact with their digital world. Team Description: Neuralink's Information Technology team owns the corporate environment that every engineer, scientist, and clinician depends on to do their work. Within IT, the Security & Identity function is responsible for who can access what, from which device, under what conditions. That means running the identity provider and SSO federation, enforcing strong authentication and device trust, securing endpoints across macOS, Windows, and Linux, centralizing logs and detections, and producing the audit evidence that supports HIPAA and SOC 2. We manage this environment as code in Terraform and GitLab, and we hold a high bar for making access both secure and low-friction for a fast-moving company. Job Description and Responsibilities: Neuralink is looking for a hands-on IT Security & Identity Engineer to own identity, access, and endpoint security for our corporate environment. You will be the technical owner of our identity provider, SSO federation, and lifecycle automation, and you will drive endpoint protection, detection, and vulnerability management alongside the rest of the IT team. This is a build-and-operate role: you will design controls, implement them in Terraform through GitLab, and then run them in production, including on-call. The ideal candidate has strong opinions grounded in experience, takes full ownership of the systems they build, makes practical risk decisions without slowing the company down, and can explain security tradeoffs clearly to engineers and non-technical staff alike. The job responsibilities will include: - Design, deploy, and operate identity and access management across Google Workspace, Microsoft Entra, and integrated SaaS applications; own SSO federation (SAML, OIDC, OAuth 2.0) and SCIM provisioning for business-critical tools. - Manage identity infrastructure and access policy as code using Terraform and GitLab CI/CD; treat the IdP, group membership, application assignments, and conditional access as versioned, reviewable state. - Drive identity lifecycle automation from onboarding through offboarding, including role-based access control (RBAC), attribute-driven group membership, just-in-time access, and reduction of standing privilege. - Design and operate strong authentication: phishing-resistant MFA (FIDO2/WebAuthn, passkeys, hardware tokens), certificate-based authentication (X.509, 802.1x), and device-trust conditions tied to MDM compliance. - Own endpoint security posture across macOS, Windows, and Linux alongside the IT team: EDR policy and operations, disk encryption, secure baselines, and compliance enforcement through MDM (Intune, Jamf, or similar). - Build and maintain security logging and detection for corporate IT: centralize identity, endpoint, SaaS, and network logs (Grafana/Loki, Prometheus, or a SIEM), write detections for identity abuse and endpoint compromise, and tune alerting. - Run enterprise vulnerability management: scanning, prioritization, remediation workflows with system owners, and evidence of closure. - Harden traditional IT services used by engineering, science, and clinical staff (email, file shares, directory services, collaboration tools, internal applications); review and improve permissions, group membership, and access models. - Partner with systems, network, and application owners to securely design and operate services on the Tailscale and FortiGate-based network: authentication and authorization, logging, patching, and least privilege. - Lead or support detection, triage, and incident response for the corporate IT environment; participate in the IT on-call rotation. - Conduct regular access reviews and audits; produce evidence supporting HIPAA, PII handling, and SOC 2 or comparable frameworks in partnership with Compliance. - Drive scripting and automation (Python, Bash, PowerShell) for repeatable security tasks: baselines, evidence collection, health checks, and remediation. - Recommend, justify, and implement improvements through an accepted change control process; define, document, and follow standards for design, testing, and implementation. - Serve as the IAM and security subject matter expert for the IT team, providing technical guidance and mentoring teammates. Required Qualifications: - Bachelor's degree in computer science, cybersecurity, or another STEM discipline, or 5+ years of professional experience in enterprise IT security engineering in lieu of a degree. - 5+ years of hands-on experience securing corporate IT environments (identity/MFA, endpoint security, logging and detection, vulnerability management, email or file services). - Demonstrated experience administering an enterprise IdP (Google Workspace, Microsoft Entra, or Okta) including SSO federation, SCIM provisioning, MFA enforcement, conditional access, and full user lifecycle management. - Strong working knowledge of IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM. - Hands-on experience managing infrastructure or identity configuration with Terraform and Git-based workflows. - Experience administering or operating at least two of the following: enterprise EDR/AV, centralized logging or SIEM, enterprise vulnerability management platform, enterprise MDM. - Scripting proficiency in Python, Bash, or PowerShell for security automation and integrations. - Excellent communication skills with IT engineers and a diverse user base including non-technical scientists and clinicians; able to explain security tradeoffs and risk decisions clearly. Preferred Qualifications: - Experience implementing phishing-resistant MFA at scale: FIDO2/WebAuthn, passkeys, hardware tokens, smart cards. - Certificate-based authentication and PKI operations: TLS, X.509, 802.1x, internal CA management. - Zero-trust architecture experience, including device trust, Tailscale or comparable mesh VPN, and identity-aware access. - Detection engineering experience: writing and tuning detections in Grafana/Loki, a SIEM, or comparable tooling. - Hardening Windows, macOS, and Linux endpoints and servers; securing file shares, email gateways, and internal applications. - Privileged access management, just-in-time access, and privilege-escalation reduction. - SOC or blue-team incident response experience on enterprise IT estates. - Configuration management with Ansible or similar; GitLab CI/CD pipelines. - Familiarity with NIST 800-53, CIS Controls, or ISO 27001 control families as implemented by IT security engineering. - Experience in regulated environments (HIPAA, SOC 2, or similar). Compliance & Data Privacy: Neuralink handles sensitive patient health information and personally identifiable information (PII). All employees are expected to understand and comply with HIPAA regulations and Neuralink’s data privacy policies. This role may involve access to protected health information (PHI) and requires a demonstrated commitment to confidentiality, data security, and responsible handling of sensitive information. Expected Compensation: The anticipated base salary for this position is expected to be within the following range. Your actual base pay will be determined by your job-related skills, experience, and relevant education or training. We also believe in aligning our employees’ success with the company's long-term growth. As such, in addition to base salary, Neuralink offers equity compensation (in the form of Restricted Stock Units (RSU)) for all full-time employees. Base Salary Range: $99,000—$185,000 USD What We Offer: Full-time employees are eligible for the following benefits listed below. - An opportunity to change the world and work with some of the smartest and most talented experts from different fields - Growth potential; we rapidly advance team members who have an outsized impact - Excellent medical, dental, and vision insurance through a PPO plan - Paid holidays - Commuter benefits - Meals provided - Equity (RSUs) *Temporary Employees & Interns excluded - 401(k) plan *Interns initially excluded until they work 1,000 hours - Parental leave *Temporary Employees & Interns excluded - Flexible time off *Temporary Employees & Interns excluded ## About Neuralink ## Company Overview - **One-liner**: Neuralink develops implantable brain-computer interfaces (BCIs) that decode neural signals to restore autonomy for people with paralysis and other neurological conditions. - **Entity Type**: Private (Series D; total funding $1.35B as of Aug 2025) - **Headquarters**: Fremont, California, United States - **Founded**: 2016 - **Founders**: Elon Musk, Max Hodak, Benjamin Rapoport, Dongjin Seo, Paul Merolla, Philip Sabes, Timothy J. Gardner, Tim Hanson, Vanessa Tolosa ## Core Business - Primary industry: Neurotechnology / Biotechnology (implantable medical devices) - Target customers: B2C (patients with quadriplegia, ALS, spinal cord injury), B2B (hospitals, research institutions, clinical partners) - Mission: "Building brain interfaces to restore autonomy" – initially helping people with unmet medical needs control computers and robotic arms with their thoughts, and ultimately unlocking human potential. ## Products & Services - **N1 Implant (“the Link”)**: Coin-sized, surgically implanted BCI that records and stimulates brain activity via flexible neural threads. Enables users to control digital devices (mouse, keyboard, apps) using thought alone. Available only in clinical trials (PRIME Study). - **Telepathy**: Product name for the N1 Implant’s capability to allow users to control computers and mobile devices (announced by Musk). - **Blindsight**: Experimental implant designed to restore visual perception by directly stimulating the visual cortex. Received FDA Breakthrough Device Designation in September 2024. - **Speech BCI**: Device under development to restore communication for individuals with severe speech impairment (ALS, stroke, etc.). Received FDA Breakthrough Device Designation in May 2025. - **Neurosurgical Robot**: Custom robot for autonomous, precise insertion of neural threads during surgery. ## Market Standing - **Valuation**: ~$9 billion (per Tracxn, as of 2026) - **Key Metric**: Total funding ~$1.35 billion (13 rounds); annual revenue ~$20 million (pre-commercial, primarily from research partnerships) - **Notable Investors/Partners**: Founders Fund (led Series D), CoreNest Capital (led 2025 venture round), Elon Musk (owns >50%). Partners include University Health Network (Toronto), FDA (regulatory collaboration). - **Growth Signals**: - 21 human patients implanted as of January 2026 - Headcount grew 31.3% year-over-year to ~400 employees (with 127 active job postings) - Received FDA Breakthrough Device Designations for Blindsight and speech BCI - Expanded clinical trials to Canada (first procedures outside the U.S. in Aug/Sep 2025) - Patients reached typing speeds of up to 40 words per minute and achieved information transfer rates comparable to able-bodied mouse users ## Competitive Advantages - **First-mover with human implants**: Only BCI company with FDA-approved human trials and over 20 implanted patients. - **Robotic precision**: Proprietary surgical robot capable of inserting ultra-thin threads (4–6 µm) that are too fine for human hands. - **Regulatory momentum**: Multiple FDA Breakthrough Device Designations accelerating development for vision, speech, and motor restoration. - **Interdisciplinary talent pool**: Recruits from Tesla, SpaceX, OpenAI, Stanford, UCSF; team spans neuroscience, electrical engineering, robotics, and microfab. - **High-profile leadership**: Elon Musk’s visibility draws talent, funding, and media attention. ## Strategic Focus - **Clinical expansion**: Scale the PRIME Study to more patients and new sites (Canada, additional countries). - **Product pipeline**: Commercialize Blindsight (vision) and speech prosthetics; develop motor/sensory restoration capabilities. - **Regulatory pathway**: Transition from trial-only to eventual commercial approval by the FDA. - **R&D**: Advance silent speech interfaces, cognitive enhancement, and broader neurological applications (epilepsy, depression, etc.). ## Why Work Here - **Mission-driven impact**: Work directly on technology that restores function and independence to people with paralysis, ALS, and blindness. - **Rapid growth**: 31% annual headcount increase; employees often advance quickly due to cross-functional, ambitious projects. - **Culture**: Open communication and collaboration champion “the best ideas, regardless of where they come from” ([neuralink.com/careers](https://neuralink.com/careers/)). - **Disciplines welcome**: Engineering (embedded, software, optical, analog IC), surgery/robotics, neuroscience, manufacturing, and operations. - **Perks & environment**: Fremont HQ with plans for a larger facility near Austin. Hands-on, lab-heavy work likely requires on-site presence. - **Career development**: Internal growth opportunities, exposure to cutting-edge science, and cross-team collaboration. ## Sources 1. [neuralink.com](https://neuralink.com/) 2. [neuralink.com/careers](https://neuralink.com/careers/) 3. [linkedin.com/company/neuralink](https://www.linkedin.com/company/neuralink) 4. [tracxn.com/d/companies/neuralink](https://tracxn.com/d/companies/neuralink/__oUVI98zbdmLZga1LgBRb3oGJJBxjbzTc7bMWUfAOLws) 5. [builtin.com/hardware/what-is-neuralink](https://builtin.com/hardware/what-is-neuralink) ## Other roles at Neuralink - [Network Engineer](https://feeny.ai/job/network-engineer-neuralink-south-san-francisco-0rvmskt1hahv) — South San Francisco, CA - [Systems Engineer - Compute](https://feeny.ai/job/systems-engineer-compute-neuralink-austin-cdvt6xyp986g) — Austin, TX / South San Francisco, CA - [Histopathology Intern](https://feeny.ai/job/histopathology-intern-neuralink-austin-xjkdd9yzygat) — Austin, TX - [Rapid Prototyping Technician](https://feeny.ai/job/rapid-prototyping-technician-neuralink-austin-d19wx0vydfwt) — Austin, TX / South San Francisco, CA - [Software Engineer, Medical Imaging](https://feeny.ai/job/software-engineer-medical-imaging-neuralink-austin-a7brttpye0jd) — Austin, TX - [Pathology Specialist, Anatomic Pathology](https://feeny.ai/job/pathology-specialist-anatomic-pathology-neuralink-austin-sm6h21x48787) — Austin, TX - [Software Engineer - Simulation](https://feeny.ai/job/software-engineer-simulation-neuralink-austin-mcm6zsqx83je) — Austin, TX / South San Francisco, CA - [Software Engineer - HIL](https://feeny.ai/job/software-engineer-hil-neuralink-austin-w4fyyg4z025x) — Austin, TX / South San Francisco, CA - [Robotics Engineer](https://feeny.ai/job/robotics-engineer-neuralink-austin-ydpa7390yk9g) — Austin, TX / South San Francisco, CA - [Contracts Manager](https://feeny.ai/job/contracts-manager-neuralink-south-san-francisco-0cwb67pp16q2) — South San Francisco, CA