Security Operations Lead at Goodfire AI in San Francisco, CA

Job description

• We're looking for a Security Operations Lead to be our first security hire and own IT and physical security at Goodfire. The stakes in AI development are extremely high, and we need to protect ourselves against sophisticated, fast-evolving threats, some of which didn't exist 6 months ago. In this role, you will keep Goodfire's people and systems secure without slowing down our fast-moving research and engineering teams.
• This is a foundational, hands-on role. We need someone who can run all of corporate security, is happy doing the unglamorous work, and understands how the threat model is evolving. You'll define what security looks like for an AI research lab, working closely with our research, engineering, and operations teams.

Responsibilities

• Identity and access: MFA, SSO, account lifecycle, and device trust.
• Endpoints: device management, EDR, hardening, and patching.
• AI agents and untrusted code: limit what they can reach from our laptops, accounts, and cloud.
• Compliance and customer trust: SOC 2, vendor reviews, and customer security questionnaires.
• Incident response, plus physical security and the network for our San Francisco office.

Requirements

• Required experience
• 5+ years in IT security or security engineering, with hands-on ownership of identity, endpoints, and corporate systems.
• Experience running SOC 2 audits and enterprise customer security reviews.
• Strong grasp of AI security, particularly how AI agents change the threat model.
• Willingness and humility to own anything security-related yourself, big or small.
• Physical security experience: access control systems and facility security.
• Experience at an early-stage startup or building a security program from scratch.
• Experience at an AI lab or with ML research environments.
• Familiarity with securing cloud infrastructure and CI/CD pipelines.

Skills

Required

• IT security
• Security engineering
• Identity management
• Endpoint management
• SOC 2 audits
• Enterprise customer security reviews
• AI security
• Threat modeling

Preferred

• Physical security
• Access control systems
• Facility security
• Early-stage startup experience
• Building security programs from scratch
• AI lab or ML research environments
• Cloud infrastructure security
• CI/CD pipeline security

Benefits

• This role offers market competitive salary, equity, and competitive benefits.
• The expected salary range for this position is $200,000 to $350,000 USD.