IT & Security Manager

OpenKrill; United States; Sur place; USD 120 000 - 170 000; Plein temps

Avantages offerts par ce poste

Health Insurance

401(k) plan with up to 2% match

25 days Paid Time Off per year

Paid Bereavement, Family, Medical and

Work computer and stipend for eligible

Résumé du poste

FAR.AI is seeking an IT & Security Manager to keep our distributed infrastructure reliable and secure. This hands-on role focuses on internal systems, identity, access, and the FAR.Labs network, with plans to grow the team as the organization scales.

You will report to the COO and work closely with leadership on risk-driven improvements. You will own security posture, drive automation, and ensure critical systems withstand targeted AI-driven threats while enabling researchers and staff to work

Qualifications

• Experience owning IT and security at a technical organization (roughly 30–150 people).
• Comfort with a terminal and some coding;Automation first mindset.
• Ability to design systems that scale and reduce repetitive requests.
• Hands-on security work driven by threat models; know what you defend against.

Responsabilités

• Own core internal IT systems end-to-end: accounts, devices, IAM, onboarding/offboarding, and office network.
• Address known security gaps with risk-based remediation: access controls, endpoint hardening, data protection, governance.
• Design self-serve infrastructure to reduce manual work; partner with other teams to automate workflows.
• Collaborate with Research, Operations, Futures, and Communications to enable secure AI adoption across departments.
• Hire and develop the in-person IT Coordinator; shape the team as the org grows.
• Communicate changes clearly and ensure feedback loops post-deployment.

Description du poste

ABOUT US

FAR.AI http://FAR.AI is a non-profit AI research institute working to ensure advanced AI is safe and beneficial for everyone. Our mission is to facilitate breakthrough AI safety research, advance global understanding of AI risks and solutions, and foster a coordinated global response.

Since our founding in July 2022, we've grown to 50+ staff https://www.far.ai/about/team, published 40+ academic papers https://scholar.google.com/citations?user=FVJ24k8AAAAJ, and convened leading AI safety events https://far.ai/events/. Our work is recognized globally, with publications at premier venues such as NeurIPS, ICML including a Best Paper Honorable Mention in 2026 https://icml.cc/virtual/2026/oral/71065, and ICLR, and features in the Financial Times https://www.ft.com/content/175e5314-a7f7-4741-a786-273219f433a1, Nature News https://www.nature.com/articles/d41586-024-02218-7, Wired Magazine https://www.wired.com/story/jailbreaking-ai-models-google-anthropic-openai-spacexai/ and MIT Technology Review https://www.technologyreview.com/2020/02/28/905615/reinforcement-learning-adversarial-attack-gaming-ai-deepmind-alphazero-selfdriving-cars/. We conduct pre-deployment testing on behalf of frontier developers such as OpenAI, independent evaluations for governments including the EU AI Office https://www.far.ai/news/far-ai-selected-to-lead-eu-ai-act-cbrn-risk-consortium, and publish the AI Security Leaderboard https://leaderboard.far.ai/ based on our red-teaming expertise. We help steer and grow the AI safety field through developing https://arxiv.org/abs/2405.06624 research https://arxiv.org/abs/2506.20702 roadmaps https://www.researchgate.net/publication/396910034_Open_Technical_Problems_in_Open-Weight_AI_Model_Risk_Management with renowned researchers such as Yoshua Bengio; running FAR.Labs https://www.far.ai/programs/far-labs, an AI safety-focused co-working space in Berkeley housing 40+ members; and supporting the community through targeted grants https://www.far.ai/programs/grantmaking to technical researchers.

THE ROLE

We are hiring an IT & Security Manager to keep FAR.AI http://FAR.AI running reliably and securely as we grow. This is a hands-on role for someone who thinks about internal systems the way a security-minded engineer does: curious about what an attacker would actually go after, and more interested in systems that hold up under pressure than in systems that pass an audit.

You will report to the COO and work closely with our Head of Research Acceleration, who owns research compute and cluster infrastructure. You own everything on the organizational side: accounts, devices, identity and access, the FAR.Labs’ office network and the security posture underneath it. In the short- to mid-term future, you will hire an in-person IT Coordinator to handle day-to-day support, and you will manage them. You are the first person on this team, and you will shape what it becomes.

WHY THIS ROLE / WHY NOW

IT at FAR.AI http://FAR.AI has been distributed across finance, business operations, research, and the executive team since our founding. That worked when we were 15 people, but has become a barrier at 50. We’re intentionally not looking for an MSP, and instead looking for someone we’re excited to build alongside.

Although our security posture is reasonably strong, we are looking to improve this to withstand targeted AI driven attacks as we increasingly work in security critical areas. We have a documented list of known improvements waiting for an owner, a risk surface that grows with every frontier lab partnership, and researchers who move fast and need to keep moving. You will be working on real problems in your first week, with a mandate to go after root causes.

KEY RESPONSIBILITIES

• IT operations: Own our core internal systems end-to-end: accounts, devices, identity and access management, onboarding and offboarding, the FAR.Labs office network, and the daily support that keeps a growing team working.
• Security remediation: Work through our known security gaps, prioritized by risk. Access controls, endpoint hardening, data protection, data governance, and vendor and application risk are the near-term substance.
• Self-serve infrastructure: Reduce the amount of work that has to route through you. Partner with Business Operations and other teams to design systems and processes that reduce manual work.
• Cross-functional partnership: Work with team leads across Research, Operations, Futures (events), and Communications to understand how they actually work and help them build securely inside their own domains. You work cross-functionally to drive AI adoption.
• Building the team: Hire the in-person IT Coordinator, then manage and develop them. You get to define the role in accordance with the organization’s needs. Over time, this team may grow.
• Internal communication and change management: Roll out changes in a way people can live with. You communicate clearly about what is changing and why, and establish feedback loops to continue iterating post-deployment.

MUST-HAVE QUALIFICATIONS

• You have owned IT and security at a technical organization of roughly 30 to 150 people, ideally as the first or sole person to do so. You built the function yourself, without a team already in place around you.
• You are comfortable in a terminal and can code. You do not need to be an excellent engineer, but you are not afraid of it. You reach for automation before a manual process.
• You think about the people using what you build. You go after root causes instead of managing symptoms; you can point to a system you redesigned so that a whole class of requests stopped arriving, and you treat that as ongoing work rather than a one-time project.
• You have done hands‑on security work driven by threat models. You can say who you were defending against and what you chose not to spend effort on, not just which frameworks you mapped to.
• You have implemented and owned core identity and device infrastructure, including MDM and SSO.
• You are fast and service‑oriented. You read the support queue as information about the system, and the people you have supported would say you were reliable.
• You communicate clearly across technical and non‑technical audiences. You can point to a time when you rolled out something that made someone's day harder, and you brought them along anyway.
• You use LLMs regularly in your own work and have an opinion on where they help and where they do not.

NICE-TO-HAVE QUALIFICATIONS

• You care about AI safety or security, or you are demonstrably curious about it. You understand why this work matters and you help assess the value of the risk we’re taking on.
• You have hired, managed, or mentored a junior teammate.
• You engage with security as a craft outside of work: your own compute build or a home lab, capture‑the‑flag competitions, side projects, or conferences like DEF CON or CCC.
• You have experience obtaining SOC 2 Type 2 and complying with GDPR. We are open to contracting out much of the work in obtaining certifications – our primary goal is to improve our actual security posture, not achieve certifications, but they may be a necessary step in certain engagements.
• You have experience in fast‑paced environments. You've worked in startups, nimble nonprofits, or high-growth teams before and can adapt to change quickly.
• You have worked in a research organization, a deep‑tech startup, or a similarly technical environment.

BENEFITS*

• Health Insurance - 94% of Insurance premium paid by Organization commencing within 1 month after your start date
• Retirement - 401(k) plan with up to 2% match
• PTO - 25 days Paid Time Off per year, accrued weekly and up to 10 days of paid sick leave per year
• Paid Leave - Paid Bereavement, Family, Medical and Pregnancy Disability Leave
• WFH Stipend & Equipment - Work computer and stipend provided for eligible emplo