Security Software Engineer

Exa; San Francisco (CA); Presencial; USD 140.000 - 230.000; Jornada completa

Descripción de la vacante

Exa is seeking a Security Engineer in San Francisco to build a protective shield for Exa's systems. You will secure processing of web-scale data, billions of pages, and enterprise deployments while preserving shipping velocity.

The role focuses on protecting infrastructure, implementing robust secrets management, and advancing security across APIs and services. You will contribute to monitoring, incident response, and compliance initiatives, ensuring secure by default architectures and scalable

Formación

• Hands-on experience in building and maintaining secure infrastructure.
• Fluent in secrets management, key management, and certificate lifecycle.
• Familiar with OS hardening and cloud security fundamentals.
• Experience with compliance efforts such as HIPAA, SOC 2.

Responsabilidades

• Build a secrets management and rotation system across distributed services, training jobs, and GPU clusters without impacting developer velocity.
• Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage.
• Create security incident response playbooks and lead incident handling, from detection to post-mortem.

Conocimientos

Security engineering

Cloud security

Vulnerability management

Incident response

Herramientas

AWS

CI/CD pipelines

Secrets management

Descripción del empleo

• We are hiring a Security Engineer to build the protective shield for all of Exa's systems. These systems include: processing web scale data, indexing hundreds of billions of pages, training foundational models on TBs of data, serving thousands of enterprise customers from our endpoints. You will be critical in making Exa run securely while ensuring our shipping velocity
• Example Projects:
• Build a secrets management and rotation system used across distributed services, training jobs, and GPU clusters without impacting developer velocity
• Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage
• Create security incident response playbooks and lead incident handling, from detection to post-mortem

You have owned compliance efforts such as HIPPA, SOC2, etcYou are super vigilant about vulnerabilities, potential attacks, and abuse, and constantly think about how to operate securely with the introduction of new technologies (OS-level, AI coding agents, etc.)You have hands-on experience in building and maintaining secure infrastructureYou are fluent in secrets management, key management, and certificate lifecycles (rotation, revocation, automation)You are comfortable with security hardening and any other details needed to make engineering systems run smoothly (VPN, development servers, etc.)You know your way around cloud security fundamentals, including multi-account AWS permissions and architectures, IAM design, secure CI/CD pipelines