Security Engineer

Exa•San Francisco, CA

5d•$180,000 - $350,000•Onsite

About The Position

Exa is building a search engine from scratch to serve every AI application. We build massive-scale infrastructure to crawl the web, train state-of-the-art embedding models to index it, and develop super high performant vector databases in Rust to search over it. We also own a $5M H200 GPU cluster that regularly lights up tens of thousands of machines. We are hiring a Security Engineer to build the protective shield for all of Exa’s systems. These systems include: processing web scale data, indexing hundreds of billions of pages, training foundational models on TBs of data, serving thousands of enterprise customers from our endpoints. You will be critical in making Exa run securely while ensuring our shipping velocity.

Requirements

Hands-on experience in building and maintaining secure infrastructure
Knowledge of cloud security fundamentals, including multi-account AWS permissions and architectures, IAM design, secure CI/CD pipelines
Fluency in secrets management, key management, and certificate lifecycles (rotation, revocation, automation)
Experience owning compliance efforts such as HIPPA, SOC2, etc.
Comfortable with security hardening and any other details needed to make engineering systems run smoothly (VPN, development servers, etc.)
Vigilance about vulnerabilities, potential attacks, and abuse, and constantly thinking about how to operate securely with the introduction of new technologies (OS-level, AI coding agents, etc.)

Responsibilities

Build a secrets management and rotation system used across distributed services, training jobs, and GPU clusters without impacting developer velocity
Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage
Create security incident response playbooks and lead incident handling, from detection to post-mortem