[Hiring] IT and Security Specialist @Epoch AI

Role Description

Epoch AI is looking for an IT and Security Specialist to own the systems, accounts and access the whole team depends on, and to set the security standards that protect our research and our data. You would decide who can reach what, run the accounts and tools we all work in, find and fix security risks yourself, and work with our engineers and researchers so that our protocols get followed rather than worked around.

We want someone who can make Epoch meaningfully harder to attack without slowing the team down. Two things sit at the centre of the job:

• Access: who can reach which systems, and keeping that current as people join, move between projects and leave.
• Security: setting the standards and doing the hands-on work to make them real.

Day to day you would be:

• Finding and fixing security risks, doing the hands-on work yourself.
• Making calls on questions like how we implement 2FA.
• Judging whether a control is worth the friction it adds.

This role is fully remote, and we are able to hire in most locations between the US Pacific and Central European time zones. We invite anyone who is interested to apply, regardless of background, experience, or credentials.

Qualifications

• 5+ years of experience in security, DevSecOps, IT operations, or a similar field.
• Experience owning security at a medium-sized organisation, rather than only advising on it.
• Experience with complex technical and research projects, ideally in the AI space.
• Fluency working with engineers.
• Experience running IT or security operations: identity, access, endpoints and cloud.
• Deep knowledge of Google Workspace administration and AWS IAM is a strong plus.
• Comfort holding admin authority and making access decisions without a committee.
• Familiarity with AI research and with what Epoch does is a plus.

Requirements

• Set our security protocols and keep them current, without adding processes the team does not need.
• Identify and remediate security risks: both the hands-on technical work, and making sure engineers and researchers implement security measures correctly.
• Own implementation decisions, such as our approach to 2FA, and be able to explain the tradeoffs behind them.
• Partner with our engineering and research teams to set security standards that are workable in practice.
• Hold us to the standards we set, and keep them light enough that people actually follow them.
• Own who can reach what across Google Workspace, GitHub, AWS, Google Cloud, 1Password, Slack and Airtable.
• Hold the admin and owner roles on our core platforms.
• Run our cloud accounts and software subscriptions.
• Own the technical half of onboarding and offboarding.
• Be the first person staff come to when something technical breaks.

Benefits

• Annual salary between $125,000 and $155,000 USD.
• Fully remote environment, including flexible work hours.
• Competitive global benefits program, including a comprehensive health insurance program.
• Generous paid time off (PTO), including no specific annual limit.
• A flexible and generous expense policy for you to spend on equipment and a large range of productivity tools.
• Paid work trips, including 3 staff retreats per year and relevant conferences.
• Access to our very well-equipped offices in Berkeley, California.

Company Description

Epoch AI is a research institute that investigates trends in machine learning and the economic consequences of AI. Our mission is to develop a comprehensive, publicly accessible knowledge base on AI that informs policymakers, industry leaders, and society at large.