Staff Security Engineer – Equity Options

XOXO AI Inc.; San Francisco (CA); On-site; USD 250,000 - 500,000; Full time

Benefits offered by this job

Health benefits

Dental benefits

Vision benefits

Job summary

XOXO AI Inc. is seeking an experienced Security Engineer to protect our systems and maintain user trust on-site in San Francisco. You will harden cloud foundations, tighten access boundaries, and build tooling to keep us safe as we scale.

You’ll partner with the founders and engineering team to embed security as a core principle, shaping incident response, IAM, and security guardrails across the development lifecycle.

Qualifications

• Shipped security or infrastructure systems from design to production with measurable improvements in risk, reliability, or incident outcomes.

Responsibilities

• Partner with engineering, product, and research to embed security into the development lifecycle (threat modeling, design reviews, secure defaults).
• Harden cloud infrastructure and enforce network topology standards (subnets, firewalls, routing) and org security policies.
• Implement isolation and segmentation strategies that limit blast radius and prevent lateral movement.
• Build and maintain security tooling and automation for engineers (CI/CD checks, scanning, guardrails) and drive findings to remediation.
• Improve observability, detection, and incident response for security-relevant events (intrusions, abuse patterns, DDoS, and bots) including rapid containment.
• Design and manage identity and access management (humans + services) and third-party integration controls, prioritizing private connectivity and least privilege.

Skills

Shipped security systems

Cloud hardening

Code review for security

Web apps security

IAM design

Monitoring and incident response

Guardrails automation

Threat modeling

Job description

XOXO AI Inc. is seeking an experienced Security Engineer to protect our systems and maintain user trust on-site in San Francisco. You will harden cloud foundations, tighten access boundaries, and build tooling to keep us safe as we scale.

You’ll partner with the founders and engineering team to embed security as a core principle, shaping incident response, IAM, and security guardrails across the development lifecycle.