IT and Security Specialist

Epoch AI is looking for an IT and Security Specialist to own the systems, accounts and access the whole team depends on, and to set the security standards that protect our research and our data. You would decide who can reach what, run the accounts and tools we all work in, find and fix security risks yourself, and work with our engineers and researchers so that our protocols get followed rather than worked around.

• Set our security protocols and keep them current, without adding processes the team does not need
• Identify and remediate security risks: both the hands-on technical work, and making sure engineers and researchers implement security measures correctly
• Own implementation decisions, such as our approach to 2FA, and be able to explain the tradeoffs behind them
• Partner with our engineering and research teams to set security standards that are workable in practice
• Hold us to the standards we set, and keep them light enough that people actually follow them
• Own who can reach what across Google Workspace, GitHub, AWS, Google Cloud, 1Password, Slack and Airtable, and grant, change and remove that access as people join, switch projects or leave
• Hold the admin and owner roles on our core platforms, so that access decisions do not queue behind our COO
• Run our cloud accounts and software subscriptions: new projects, IAM, budgets and quota increases, plus seats, licences, renewals and nonprofit pricing
• Own the technical half of onboarding and offboarding: every account and group a new person needs on their first day, and a clean removal when someone leaves
• Be the first person staff come to when something technical breaks. We are remote, so this is accounts and software rather than deskside hardware

• 5+ years of experience in security, DevSecOps, IT operations, or a similar field
• Experience owning security at a medium-sized organisation, rather than only advising on it
• Experience with complex technical and research projects, ideally in the AI space
• Fluency working with engineers. You will write very little code in this role, but you will work closely and constantly with people who do
• Experience running IT or security operations: identity, access, endpoints and cloud. Deep knowledge of Google Workspace administration and AWS IAM is a strong plus
• Comfort holding admin authority and making access decisions without a committee

Apply through the application link on the job listing page. Please submit all application materials in English. Do not include a cover letter, photograph, headshot, or personal information not relevant to the role. For questions, email careers@epoch.ai, but note that applications must be submitted through the link on the page.