Infrastructure Security Engineer

SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates.ABOUT THE ROLE:We are seeking a talented and motivated Infrastructure Security Engineer to join our security team. In this role, you will design, implement, and maintain secure cloud and hybrid infrastructure, and ensure the integrity of our cloud-native applications.This role focuses on securing critical infrastructure across multi-cloud and hybrid environments, with work that may span platforms such as SpaceXAI, X Social, X Money and related systems. You’ll operate with an automation-first mindset: building secure foundations, hardening platforms at scale, and partnering closely with engineering teams so security is embedded in how we build and run systems—not bolted on after the fact.RESPONSIBILITIES:Cloud & infrastructure securityDesign and implement secure cloud architectures across multiple cloud platforms (e.g., AWS, GCP, Azure)Build and secure mission-critical applications in hybrid cloud and on-premises environmentsDevelop and maintain Infrastructure as Code (IaC) templates with embedded security controlsAssist with regular security assessments and audits of cloud infrastructure and servicesImplement and manage cloud security tools and services (e.g., CSPM, CWPP, CASB)Manage identities and roles effectively across cloud and hybrid environmentsMonitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF, GDPR, HIPAA)Platform, containers & developer enablementDesign and implement secure container standards and automation that enable frictionless developer workflowsMaintain Kubernetes security aligned with current best practicesCollaborate with development teams to ensure security best practices are integrated into CI/CD pipelinesSecure and enhance CI/CD pipelines; integrate and maintain code scanning platformsDetection, operations & toolingMonitor and respond to security events and incidents in cloud and hybrid environmentsMaintain SIEM data pipelines needed for reliable alertingBuild, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management (e.g., Puppet)Develop dashboards and alerts from security metricsDevelop and maintain cloud security policies, standards, and proceduresOwn security projects end to end: identify issues and implement solutionsStay current with emerging cloud security threats and mitigation strategiesBASIC QUALIFICATIONS:Bachelor's degree in Computer Science, Cybersecurity, or a related field3–5 years of experience in cloud security, infrastructure security, or related rolesStrong understanding of cloud security principles, compliance frameworks, and best practicesProficiency in at least one cloud platform (AWS, GCP, or Azure) and associated security servicesProven experience securing hybrid AWS/on-premises (or multi-cloud) environments, including IAM and overall security postureExperience with Infrastructure as Code tools (e.g., Terraform, CloudFormation)Familiarity with containerization technologies and their security implicationsKnowledge of network security concepts and protocolsExperience with scripting languages (e.g., Python, Bash) for automation and tool developmentProactive mindset with strong ownership, critical thinking, and problem-solving skillsLocated in the SF Bay Area or willing to relocatePREFERRED SKILLS AND EXPERIENCE:Relevant security certifications (e.g., CCSP, CSSK, AWS Security Specialty)Deep expertise in Kubernetes and container securityExperience with multi-cloud environments and cloud-to-cloud securityKnowledge of CI/CD best practices and toolsFamiliarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS, NIST CSF)Strong proficiency with Python, Terraform, and configuration management (e.g., Puppet)Hands-on experience building GitHub Actions and workflowsExperience with observability and security operations tooling (e.g., Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh)Experience in building custom cloud security tools or integrationsInterest in leveraging AI for cloud security monitoring and automationContributions to open-source cloud security projectsExperience with securing AI/ML workloads in cloud environmentsExperience in banking, money transmission, P2P payments, or similarly regulated financial platformsCOMPENSATION AND BENEFITS:$100,000 - $258,000 USDBase salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.SpaceXAI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.