Security Engineer, Cloud & Infra for Scalable AI Systems

Exa Labs; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Premium health benefits

Fertility benefits

Monthly wellness stipend

Job summary

Exa Labs is seeking a security-focused engineer to design and operate secure infrastructure at scale in San Francisco. You will own security primitives across distributed systems, implement IAM and CI/CD security controls, and automate secrets and certificate lifecycles.

The role requires experience in HIPAA/SOC 2 compliance and hands-on security hardening of production systems, VPNs, and development environments. International sponsorship is possible for qualified candidates.

Qualifications

• Hands-on experience building and maintaining secure infrastructure.
• Cloud security fundamentals, IAM design, and secure CI/CD pipelines.
• Secrets management, key management, and certificate lifecycle automation.
• Ownership of compliance efforts such as HIPAA, SOC 2, etc.
• Security hardening and operational details to keep engineering systems secure.

Responsibilities

• Build secrets management and rotation system used across distributed services, training jobs, and GPU clusters without impacting velocity.
• Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage.
• Create security incident response playbooks and lead incident handling from detection to post-mortem.

Skills

Secure infrastructure

Cloud security

Secrets management

HIPAA & SOC 2 compliance

Vulnerability management

Job description

Exa Labs is seeking a security-focused engineer to design and operate secure infrastructure at scale in San Francisco. You will own security primitives across distributed systems, implement IAM and CI/CD security controls, and automate secrets and certificate lifecycles.

The role requires experience in HIPAA/SOC 2 compliance and hands-on security hardening of production systems, VPNs, and development environments. International sponsorship is possible for qualified candidates.