Security Engineer

Exa; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health benefits

Fertility benefits

Wellness stipend

Paid time off

Job summary

Exa in San Francisco is hiring a Security Engineer to build the protective shield for all of Exa’s systems. You will secure massive-scale infrastructure, IAM design, CI/CD pipelines, and secrets management across cloud and on-prem components.

You will own monitoring, incident response playbooks, and compliance efforts (HIPAA, SOC2). This is an in-person role; visa sponsorship is available. Exa offers premium health benefits, fertility support, and a monthly wellness stipend.

Qualifications

• Hands-on experience building and maintaining secure infrastructure.
• Familiar with multi-account AWS, IAM, and secure CI/CD pipelines.
• Experience with HIPAA, SOC2 and related compliance programs.
• Vigilant about vulnerabilities and secure operation when adopting new technologies.

Responsibilities

• Build a secrets management and rotation system across distributed services and GPU clusters.
• Develop monitoring and alerting for anomalous behavior across APIs, services, and users.
• Create security incident response playbooks and lead incident handling from detection to post-mortem.

Skills

Security engineering

Cloud security

Secrets management

Compliance

Incident response

Job description

Exa is building a search engine from scratch to serve every AI application. We build massive-scale infrastructure to crawl the web, train state-of-the-art embedding models to index it, and develop super high performant vector databases in Rust to search over it. We also own a $5M H200 GPU cluster that regularly lights up tens of thousands of machines.

We are hiring a Security Engineer to build the protective shield for all of Exa’s systems. These systems include: processing web scale data, indexing hundreds of billions of pages, training foundational models on TBs of data, serving thousands of enterprise customers from our endpoints. You will be critical in making Exa run securely while ensuring our shipping velocity.

Desired Experience

• You have hands-on experience in building and maintaining secure infrastructure

• You know your way around cloud security fundamentals, including multi-account AWS permissions and architectures, IAM design, secure CI/CD pipelines

• You are fluent in secrets management, key management, and certificate lifecycles (rotation, revocation, automation)

• You have owned compliance efforts such as HIPPA, SOC2, etc.

• You are comfortable with security hardening and any other details needed to make engineering systems run smoothly (VPN, development servers, etc.)

• You are super vigilant about vulnerabilities, potential attacks, and abuse, and constantly think about how to operate securely with the introduction of new technologies (OS-level, AI coding agents, etc.)

Example Projects

• Build a secrets management and rotation system used across distributed services, training jobs, and GPU clusters without impacting developer velocity

• Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage

• Create security incident response playbooks and lead incident handling, from detection to post-mortem

This is an in-person opportunity in San Francisco. We’re happy to sponsor international candidates (e.g., STEM OPT, OPT, H1B, O1, E3). In addition to premium healthcare benefits (medical, dental, vision), we also offer fertility benefits and a monthly wellness stipend to all of our employees.

Exa is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, age, veteran status, marital status, pregnancy or related conditions, criminal histories consistent with applicable law, or any other basis protected by applicable law.