Security Engineer — Cloud, IAM & Incident Response (SF)

XOXO AI; Home (KS); On-site; USD 250,000 - 500,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Job summary

XOXO AI in San Francisco, CA, is seeking an experienced Security Engineer to harden our cloud foundations, enforce access boundaries, and build tooling for secure development and rapid remediation.

You will partner with founders and engineering to embed security across the lifecycle, with hands-on work in threat modeling, IAM, DDoS defenses, and incident response to protect products as we scale.

Qualifications

• Shipped security or infrastructure systems from design to production with measurable improvements.
• Expert knowledge of cloud hardening, baselines, and policy enforcement.
• Strong generalist software engineering background with ability to review production code for security risks.
• Hands-on experience securing web apps and APIs, including auth flows and data protection.
• Built segmentation strategies to reduce blast radius and prevent lateral movement.
• Experience with monitoring, threat detection, and incident response in production.

Responsibilities

• Partner with engineering, product, and research to embed security into the development lifecycle.
• Harden cloud infrastructure and enforce network topology standards and org security policies.
• Implement isolation and segmentation strategies to limit blast radius.
• Build and maintain security tooling and automation for engineers and drive remediation.
• Improve observability, detection, and incident response for security events.
• Design and manage IAM and third-party integration controls, prioritizing least privilege.

Skills

Cloud security

Threat modeling

IAM / access control

Incident response

Code review for security

DevSecOps tooling

Tools

Cloud platforms (AWS/Azure/GCP)

Static/Dynamic analysis tools

Network segmentation

Security automation

Job description

XOXO AI in San Francisco, CA, is seeking an experienced Security Engineer to harden our cloud foundations, enforce access boundaries, and build tooling for secure development and rapid remediation.

You will partner with founders and engineering to embed security across the lifecycle, with hands-on work in threat modeling, IAM, DDoS defenses, and incident response to protect products as we scale.