Job description

About Neuralink: We are creating devices that enable a bi-directional interface with the brain. These devices allow us to restore movement to the paralyzed, restore sight to the blind, and revolutionize how humans interact with their digital world. Team Description: Neuralink is building brain-computer interfaces that will restore autonomy to people with unmet medical needs — and technology this consequential has to be secure at every layer. The Security team protects both the company and the product. The scope includes corporate infrastructure, endpoints, and identity systems our engineers rely on every day, and the implant, surgical robot, and clinical software platforms our participants depend on. This role spans both sides of Neuralink’s mission, combining IT Security Operations and Product Security in one hands-on engineering seat. As a Security Engineer on this team, you will defend our fleet, networks, and cloud by building detections, responding to incidents, and hardening systems. You will threat model, review, and test the software we ship, from firmware and mobile apps to cloud services. You will work as an individual contributor embedded with the Software team, close to the engineers who build these systems, with wide latitude to find the highest-impact security problems and fix them. Job Description and Responsibilities: Run and improve security operations: triage and investigate alerts across endpoint, identity, network, email, and cloud, and lead incident response from detection through root cause and remediation. Build and tune detections and response automation (SIEM, EDR, SOAR), and write tooling that eliminates manual security work and scales coverage as the company grows. Partner with IT to harden corporate security infrastructure: SSO/MFA and identity lifecycle, endpoint management, email security, and vulnerability management. Perform threat modeling and secure design and code reviews for Neuralink products — implant firmware, surgical robotics, BCI, infrastructure, ASIC, clinical and consumer-facing applications, and cloud backends. Close security holes in Neuralink products by writing code, and collaborating with teams to get fixes merged. Find vulnerabilities before attackers do: run internal security assessments and penetration tests, triage external vulnerability reports, and drive remediation with owning teams. Establish and improve security standards, incident response runbooks, and secure development practices, partnering cross-functionally with software, infrastructure, IT, and compliance teams. Required Qualifications: Hands-on experience in security engineering, security operations, or product/application security — or evidence of exceptional ability in lieu of traditional experience or qualifications. Strong technical fundamentals: operating system internals (Linux, macOS, Windows), networking, and authentication/authorization. Experience detecting, investigating, and responding to security incidents. An attacker’s mindset paired with a builder’s bias: you find problems and then fix them, independently and end-to-end. Clear communication with both technical and non-technical stakeholders, and sound judgment under pressure. Preferred Qualifications: Product security depth: threat modeling, secure code review at scale, or penetration testing of web, mobile, or embedded targets. Experience securing cloud environments (AWS or similar), Kubernetes/containers, and infrastructure-as-code. Embedded, firmware, or hardware security experience — especially for medical devices or other safety-critical systems. Familiarity with security in regulated environments (FDA premarket cybersecurity guidance, HIPAA, SOC 2). Detection engineering or security automation experience across a modern SecOps stack. CTF, bug bounty, or public security research track record, or relevant certifications (e.g., OSCP). Experience mentoring engineers or independently owning security processes end-to-end. Expected Compensation: The anticipated base salary for this position is expected to be within the following range. Your actual base pay will be determined by your job-related skills, experience, and relevant education or training. We also believe in aligning our employees’ success with the company's long-term growth. As such, in addition to base salary, Neuralink offers equity compensation (in the form of Restricted Stock Units (RSU)) for all full-time employees. Base Salary Range: $123,000 — $230,000 USD What We Offer: Full-time employees are eligible for the following benefits listed below. An opportunity to change the world and work with some of the smartest and most talented experts from different fields Growth potential; we rapidly advance team members who have an outsized impact Excellent medical, dental, and vision insurance through a PPO plan Paid holidays Commuter benefits Meals provided Equity (RSUs) *Temporary Employees & Interns excluded 401(k) plan *Interns initially excluded until they work 1,000 hours Parental leave *Temporary Employees & Interns excluded Flexible time off *Temporary Employees & Interns excluded

Requirements

Must-haves

Run and improve security operations: triage and investigate alerts across endpoint, identity, network, email, and cloud, and lead incident response from detection through root cause and remediation.
Build and tune detections and response automation (SIEM, EDR, SOAR), and write tooling that eliminates manual security work and scales coverage as the company grows.
Partner with IT to harden corporate security infrastructure: SSO/MFA and identity lifecycle, endpoint management, email security, and vulnerability management.
Perform threat modeling and secure design and code reviews for Neuralink products — implant firmware, surgical robotics, BCI, infrastructure, ASIC, clinical and consumer-facing applications, and cloud backends.
Close security holes in Neuralink products by writing code, and collaborating with teams to get fixes merged.
Find vulnerabilities before attackers do: run internal security assessments and penetration tests, triage external vulnerability reports, and drive remediation with owning teams.
Establish and improve security standards, incident response runbooks, and secure development practices, partnering cross-functionally with software, infrastructure, IT, and compliance teams.
Hands-on experience in security engineering, security operations, or product/application security — or evidence of exceptional ability in lieu of traditional experience or qualifications.
Strong technical fundamentals: operating system internals (Linux, macOS, Windows), networking, and authentication/authorization.
Experience detecting, investigating, and responding to security incidents.
An attacker’s mindset paired with a builder’s bias: you find problems and then fix them, independently and end-to-end.
Clear communication with both technical and non-technical stakeholders, and sound judgment under pressure.

Nice-to-haves

Product security depth: threat modeling, secure code review at scale, or penetration testing of web, mobile, or embedded targets.
Experience securing cloud environments (AWS or similar), Kubernetes/containers, and infrastructure-as-code.
Embedded, firmware, or hardware security experience — especially for medical devices or other safety-critical systems.
Familiarity with security in regulated environments (FDA premarket cybersecurity guidance, HIPAA, SOC 2).
Detection engineering or security automation experience across a modern SecOps stack.
CTF, bug bounty, or public security research track record, or relevant certifications (e.g., OSCP).
Experience mentoring engineers or independently owning security processes end-to-end.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awskubernetes

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave