Security Engineer

Join Neuralink, a pioneering company focused on developing brain-computer interfaces to restore autonomy to individuals with unmet medical needs. As a Security Engineer, you will play a crucial role in protecting both the company and its products. Your responsibilities will include defending our fleet, networks, and cloud, threat modeling, reviewing and testing software, and improving security operations. You will work closely with the Software team and have the opportunity to make a significant impact on the company's security posture.

• Defend Neuralink's fleet, networks, and cloud by building detections, responding to incidents, and hardening systems.
• Run and improve security operations: triage and investigate alerts across endpoint, identity, network, email, and cloud, and lead incident response.
• Perform threat modeling and secure design and code reviews for Neuralink products — implant firmware, surgical robotics, BCI, infrastructure, ASIC, clinical and consumer-facing applications, and cloud backends.

• Experience detecting, investigating, and responding to security incidents
• Clear communication with both technical and non-technical stakeholders, and sound judgment under pressure
• Hands-on experience in security engineering, security operations, or product/application security — or evidence of exceptional ability in lieu of traditional experience or qualifications
• Strong technical fundamentals: operating system internals (Linux, macOS, Windows), networking, and authentication/authorization
• An attacker’s mindset paired with a builder’s bias: you find problems and then fix them, independently and end-to-end
• Product security depth: threat modeling, secure code review at scale, or penetration testing of web, mobile, or embedded targets
• Experience securing cloud environments (AWS or similar), Kubernetes/containers, and infrastructure-as-code
• Embedded, firmware, or hardware security experience — especially for medical devices or other safety-critical systems
• Familiarity with security in regulated environments (FDA premarket cybersecurity guidance, HIPAA, SOC 2)
• CTF, bug bounty, or public security research track record, or relevant certifications (e.g., OSCP)
• Detection engineering or security automation experience across a modern SecOps stack
• Experience mentoring engineers or independently owning security processes end-to-end