Jobs / United States / Neuralink Corp
IT Security & Identity Engineer
Neuralink Corp · 🇺🇸 Austin, Texas, United States
Sponsorship verdict
Sponsorship possible
One solid signal, not two — worth applying, and worth asking about sponsorship early.
- Employer is on a government sponsor recordThe US Department of Labor certified 21 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 2 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
- The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
- No salary bar for this routeH-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area. Cap-subject employers enter a lottery weighted by wage level. Source: https://www.federalregister.gov/documents/2025/12/29/2025-23853/weighted-selection-process-for-registrants-and-petitioners-seeking-to-file-cap-subject-h-1b, rules effective 2026-02-27.
- What Neuralink Corp paid sponsored hires in similar roles2 certified filings for “Software Engineer” (Software Developers) in TX: $148k–$148k, median $148k. Most were filed at wage level I (50%) — 1 lottery entry, ≈15% projected selection odds for cap-subject employers. Source: US Department of Labor LCA disclosure data (Oct 2025 – Jun 2026).
- Confirmed live todayWhen a source last listed this job as open.
US H-1B: cap-subject employers enter a lottery weighted by wage level — Level I gets 1 entry, Level IV gets 4 (DHS projected selection odds ≈15% at Level I to ≈61% at Level IV). Universities and non-profit research employers are cap-exempt. The $100,000 fee for new petitions from abroad is currently blocked by a court order (appeal pending).
A verdict summarises public evidence; it is not legal advice and never a guarantee — the employer and the immigration authority decide. Sign in to factor in where you can already work.
Or apply yourself on the official page →
Sponsor Radar — Neuralink Corp
The US Department of Labor certified 21 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 2 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
Past sponsorship or register membership never guarantees sponsorship for this vacancy or for you. Full Sponsor Radar for Neuralink Corp →
About the role
About Neuralink: We are creating devices that enable a bi-directional interface with the brain. These devices allow us to restore movement to the paralyzed, restore sight to the blind, and revolutionize how humans interact with their digital world. Team Description: Neuralink's Information Technology team owns the corporate environment that every engineer, scientist, and clinician depends on to do their work. Within IT, the Security & Identity function is responsible for who can access what, from which device, under what conditions. That means running the identity provider and SSO federation, enforcing strong authentication and device trust, securing endpoints across macOS, Windows, and Linux, centralizing logs and detections, and producing the audit evidence that supports HIPAA and SOC 2. We manage this environment as code in Terraform and GitLab, and we hold a high bar for making access both secure and low-friction for a fast-moving company. Job Description and Responsibilities: Neuralink is looking for a hands-on IT Security & Identity Engineer to own identity, access, and endpoint security for our corporate environment. You will be the technical owner of our identity provider, SSO federation, and lifecycle automation, and you will drive endpoint protection, detection, and vulnerability management alongside the rest of the IT team. This is a build-and-operate role: you will design controls, implement them in Terraform through GitLab, and then run them in production, including on-call. The ideal candidate has strong opinions grounded in experience, takes full ownership of the systems they build, makes practical risk decisions without slowing the company down, and can explain security tradeoffs clearly to engineers and non-technical staff alike. The job responsibilities will include: • Design, deploy, and operate identity and access management across Google Workspace, Microsoft Entra, and integrated SaaS applications; own SSO federation (SAML, OIDC, OAuth 2.0) and SCIM provisioning for business-critical tools. • Manage identity infrastructure and access policy as code using Terraform and GitLab CI/CD; treat the IdP, group membership, application assignments, and conditional access as versioned, reviewable state. • Drive identity lifecycle automation from onboarding through offboarding, including role-based access control (RBAC), attribute-driven group membership, just-in-time access, and reduction of standing privilege. • Design and operate strong authentication: phishing-resistant MFA (FIDO2/WebAuthn, passkeys, hardware tokens), certificate-based authentication (X.509, 802.1x), and device-trust conditions tied to MDM compliance. • Own endpoint security posture across macOS, Windows, and Linux alongside the IT team: EDR policy and operations, disk encryption, secure baselines, and compliance enforcement through MDM (Intune, Jamf, or similar). • Build and maintain security logging and detection for corporate IT: centralize identity, endpoint, SaaS, and network logs (Grafana/Loki, Prometheus, or a SIEM), write detections for identity abuse and endpoint compromise, and tune alerting. • Run enterprise vulnerability management: scanning, prioritization, remediation workflows with system owners, and evidence of closure. • Harden traditional IT services used by engineering, science, and clinical staff (email, file shares, directory services, collaboration tools, internal applications); review and improve permissions, group membership, and access models. • Partner with systems, network, and application owners to securely design and operate services on the Tailscale and FortiGate-based network: authentication and authorization, logging, patching, and least privilege. • Lead or support detection, triage, and incident respons