Security Engineer

Responsibilities

• Build and maintain secure infrastructure across Exa’s distributed services, training jobs, GPU clusters, APIs, and internal systems.
• Design cloud security controls, including multi-account AWS permissions, architectures, and IAM.
• Develop secure CI/CD pipelines and manage secrets, keys, and certificate rotation, revocation, and automation.
• Own compliance efforts such as HIPPA and SOC2.
• Harden engineering systems, including VPNs and development servers, against vulnerabilities, attacks, and abuse.
• Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage.
• Create security incident response playbooks and lead incident handling through post-mortems.

Requirements

• Hands-on experience building and maintaining secure infrastructure.
• Knowledge of cloud security fundamentals, multi-account AWS permissions and architectures, IAM design, and secure CI/CD pipelines.
• Fluency in secrets management, key management, and certificate lifecycles.
• Experience owning compliance efforts such as HIPPA and SOC2.
• Comfort with security hardening and operational security details including VPNs and development servers.
• Strong vigilance around vulnerabilities, attacks, abuse, and the security implications of new technologies.

Benefits

• In-person work in San Francisco.
• International visa sponsorship is available, including STEM OPT, OPT, H1B, O1, and E3.
• Premium medical, dental, and vision healthcare benefits.
• Fertility benefits.
• Monthly wellness stipend.