IT Specialist

Firsthand has built the first AI-powered Brand Agent platform, transforming the way marketers and publishers engage consumers through their own AI agents, anywhere online.

While most AI applications in marketing and advertising focus on back-office automation, the Firsthand Brand Agent Platform™ powers front-line consumer engagement. Operating across both owned properties and paid media, Firsthand's Brand Agents make a company’s expertise accessible in real time, adapting to consumers’ interests and guiding them towards the information they need to take action. Central to the platform is Lakebed™, the company’s AI-first data and knowledge rights management system that ensures brands retain full ownership and control of their expertise.

Firsthand is led by Jon Heller, Michael Rubenstein, and Wei Wei, whose previous ventures helped build the foundations of modern digital advertising. Backed by Radical Ventures, FirstMark Capital, Aperiam Ventures, and Crossbeam Venture Partners, Firsthand is shaping the future of AI-driven consumer engagement.

Firsthand is headquartered in NYC, with team members working together in-office three days a week.

The IT Specialist will play a key role in managing our internal technology ecosystem overseeing endpoint management, maintaining security compliance, managing hardware/software inventory, and supporting employees through troubleshooting and system optimization. This role requires both technical expertise and a proactive, solutions-oriented mindset.

• Device, Endpoint, & Network Management:
  Administer and optimize Unified Endpoint Management (UEM) tools (e.g., Hexnode, Jamf, Intune, Kandji, or similar) to ensure all employee devices are secure, compliant, and up to date.
  Oversee day-to-day office network maintenance and connectivity, including managing Wi-Fi, VPN, and local network configurations.

• Security & Compliance:
  Maintain cybersecurity management systems and documentation to support frameworks such as SOC 2 Type 2 and ISO 27001/17/18. Collaborate with leadership and external auditors to ensure continuous compliance.

• Audit & Risk Management:
  Support or lead responses to customer security questionnaires and audits. Work cross-functionally to track and close compliance gaps.

• Automation & Monitoring:
  Utilize tools like Vanta (or similar compliance automation platforms) to monitor controls, track remediation efforts, and ensure continuous security readiness.

• Inventory Management:
  Oversee asset lifecycle management, including procurement, deployment, tracking, and offboarding of devices and licenses.

• Disaster Recovery Support:
  Participate in disaster recovery planning and testing, ensuring accurate documentation, policy compliance, and communication.

• Employee Support:
  Provide tier 2/3 technical support for internal systems, SaaS tools, and network connectivity issues.
  Develop internal documentation and training materials to promote security awareness.

• Business Continuity & Infrastructure Planning:
  Contribute to business continuity and disaster recovery planning efforts, ensuring critical infrastructure is resilient, secure, and scalable.

We’re a cloud-first organization that prioritizes efficiency, automation, and security.

Our current tools include:

• Endpoint & Device Management: Hexnode

• Collaboration & Productivity: Google Workspace

• Security & Access Management: 1Password

• Cloud Infrastructure: Google Cloud Platform (GCP)

• Compliance & Monitoring: Vanta

You’ll have the opportunity to evaluate and influence our future IT and security toolset as we continue scaling our infrastructure and team.

• Experience: 3–5 years in IT operations, systems administration, or security compliance, preferably in a cloud-first or startup environment.
  

• Technical Skills:

  • Proficiency with UEM tools (Jamf, Intune, Kandji, etc.)

  • Working knowledge of compliance standards (SOC 2, ISO 27001)

  • Familiarity with compliance automation tools (Vanta, Drata, Secureframe)

  • Experience with basic network configuration, routing, and troubleshooting (Wi-Fi, VPN, LAN/WAN)

  • Strong troubleshooting and diagnostic abilities across macOS, Windows, and SaaS applications

• Soft Skills: Excellent documentation, communication, and collaboration skills; ability to manage multiple priorities in a fast-paced environment.

If you are ready to embark on an exhilarating journey at the forefront of AI, seize this incredible opportunity and apply here. We eagerly anticipate hearing from you!

Note: Compensation and equity will be market-competitive for well-capitalized, early stage startups and will be discussed during the interview process.