Security Engineer

Required

• You know your way around cloud security fundamentals, including multi-account AWS permissions and architectures, IAM design, secure CI/CD pipelines
• You are fluent in secrets management, key management, and certificate lifecycles (rotation, revocation, automation)
• You are comfortable with security hardening and any other details needed to make engineering systems run smoothly (VPN, development servers, etc.)
• You are super vigilant about vulnerabilities, potential attacks, and abuse, and constantly think about how to operate securely with the introduction of new technologies (OS-level, AI coding agents, etc.)
• Example Projects
• Build a secrets management and rotation system used across distributed services, training jobs, and GPU clusters without impacting developer velocity
• Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage
• Create security incident response playbooks and lead incident handling, from detection to post-mortem
• This is an in-person opportunity in San Francisco. We're happy to sponsor international candidates (e.g., STEM OPT, OPT, H1B, O1, E3). In addition to premium healthcare benefits (medical, dental, vision), we also offer fertility benefits and a monthly wellness stipend to all of our employees.
• Exa is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, age, veteran status, marital status, pregnancy or related conditions, criminal histories consistent with applicable law, or any other basis protected by applicable law.