Security - Member of Technical Staff

Goodfire•San Francisco, CA

3d•Onsite

About The Position

Goodfire is an AI interpretability research lab that builds interpretability agents and infrastructure to understand, monitor, and align AI models. The company is seeking its first security hire to own security across its infrastructure, product, and company. This is a foundational, hands-on engineering role focused on protecting the organization against sophisticated and rapidly evolving threats as AI capabilities advance. The role will help define security practices for an AI research lab and work closely with research, engineering, and operations teams. The position involves tracking newly disclosed vulnerabilities and attacks, assessing the company’s exposure, and responding quickly. It also covers access and credential management, monitoring and detection, product and infrastructure security, and security operations. The position is based at Goodfire’s San Francisco headquarters and is in person five days per week, with one company-wide remote week per month. The role reports to the CTO. The expected salary range is $250,000 to $500,000 USD, with market-competitive equity and benefits.

Requirements

At least 5 years of experience in security engineering, with hands-on ownership of cloud and infrastructure security.
Strong software engineering skills and experience building security tooling.
Experience running incident response and vulnerability management.
Strong understanding of AI security, including how AI agents change the threat model and how to use AI agents in security work.
Willingness and humility to personally own security-related work of any size.

Nice To Haves

Startup experience or experience building a security program from scratch.
Experience securing ML research infrastructure or sandboxes for AI agents.
Experience with application and product security.
Corporate security experience with SSO, MFA, and endpoint management.

Responsibilities

Track newly public exploits, supply chain risks, and third-party breaches; assess Goodfire’s exposure and remediate issues quickly.
Limit access for people, services, and AI agents using short-lived credentials and tightly managed API keys.
Establish logging and alerting across cloud environments, clusters, networks, and SaaS tools.
Maintain product security as new features are built and shipped.
Secure cloud infrastructure, GPU clusters, and agent sandboxes.
Own security operations, including SSO, MFA, and endpoint security.
Work with research, engineering, and operations teams to define security practices for an AI research lab.