EXA
Security Engineer
About this role
Exa is seeking a Security Engineer to design and maintain protective infrastructure for their AI-powered search engine platform, which processes web-scale data and serves thousands of enterprise customers. You'll own security across cloud infrastructure, secrets management, compliance, and incident response while balancing security with engineering velocity.
What you'll do
- Design and maintain secure cloud infrastructure and multi-account AWS architectures with proper IAM permissions
- Build and manage secrets management, key management, and certificate lifecycle automation systems
- Lead compliance initiatives including SOC2, HIPAA, and other regulatory frameworks
- Implement security hardening across development environments, VPNs, and internal systems
- Monitor for vulnerabilities and anomalous behavior across APIs, services, and customer usage
- Develop incident response playbooks and lead security incident handling and post-mortems
What they're looking for
- Cloud security (AWS, multi-account architecture, IAM design)
- Secrets and key management systems
- CI/CD pipeline security
- Compliance frameworks (SOC2, HIPAA)
- Infrastructure hardening and system administration
- Security monitoring and alerting
- Incident response and threat analysis
- Certificate lifecycle management
Benefits
- Premium healthcare coverage (medical, dental, vision)
- Fertility benefits
- Monthly wellness stipend
- Visa sponsorship available (STEM OPT, H1B, O1, E3)
- In-person work in San Francisco
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
EXA
Exa builds AI-powered search infrastructure that powers major products and serves hundreds of thousands of developers through APIs, SDKs, and web crawling technology. The company is hiring full-stack engineers, research engineers, distributed systems architects, customer-facing deployment engineers, and growth engineers to expand its platform and customer base.
View all jobs at EXALikely interview questions
- Walk us through your experience building or maintaining secure infrastructure at scale—what were the biggest challenges?
- How have you approached secrets management and key rotation in distributed systems without impacting developer velocity?