# Security Engineer

**Company:** [Exa](https://hotfix.jobs/companies/exa)
**Location:** San Francisco, CA
**Role:** Security Engineering
**Salary:** $180k – $350k/yr
**Skills:** AWS, Cloud Security, IAM, CI/CD, Secrets Management, Key Management, Certificate Management, HIPAA, SOC 2, Vpn, Incident Response, Vulnerability Management
**Posted:** 2026-08-27

> The Security Engineer will secure cloud infrastructure, engineering systems, APIs, model-training environments, and GPU clusters while supporting rapid delivery. The role requires hands-on cloud security, IAM, secrets and certificate management, compliance ownership, vulnerability monitoring, and incident response experience.

## Job Description

## Responsibilities
- Build and maintain secure infrastructure for web-scale data processing, search indexing, foundational model training, GPU clusters, APIs, and enterprise services.
- Design and implement cloud security controls, including multi-account AWS permissions and architectures, IAM, and secure CI/CD pipelines.
- Manage secrets, encryption keys, and certificate lifecycles, including rotation, revocation, and automation.
- Own compliance efforts such as HIPAA and SOC 2.
- Harden engineering systems, including VPNs and development servers.
- Monitor vulnerabilities, potential attacks, anomalous behavior, and abuse across APIs, internal services, and customer usage.
- Develop security practices for emerging technologies, including operating-system changes and AI coding agents.
- Build secrets-management and rotation systems for distributed services, training jobs, and GPU clusters.
- Create monitoring and alerting for anomalous behavior.
- Develop incident-response playbooks, lead incident handling, and conduct postmortems.

## Requirements
- Hands-on experience building and maintaining secure infrastructure.
- Knowledge of cloud security fundamentals, multi-account AWS architectures and permissions, IAM design, and secure CI/CD.
- Experience with secrets management, key management, and certificate lifecycle automation.
- Experience owning compliance efforts such as HIPAA and SOC 2.
- Ability to perform security hardening and operate engineering systems securely.
- Strong vigilance regarding vulnerabilities, attacks, and abuse.

## Compensation and Benefits
- Salary: $180,000–$350,000 annually.
- Medical, dental, and vision coverage.
- Fertility benefits.
- Monthly wellness stipend.
- International visa sponsorship may be available.

## Similar jobs

- [Corporate Security Systems Engineer](https://hotfix.jobs/jobs/9a4ec7a6-0304-4f1e-b7a7-84d64f4413a7) - Onebrief - Remote - $180k – $200k/yr
- [Manager, Security Operations](https://hotfix.jobs/jobs/0a4637da-6072-4ec3-a0a9-8b6d4a412d45) - Vanta - Remote - $178k – $209k/yr
- [QMS Manager](https://hotfix.jobs/jobs/4c317f13-ae5c-4532-bffc-617f1e288c04) - Huntress - Remote - $185k – $200k/yr
- [Platform Security Engineer](https://hotfix.jobs/jobs/353f9275-bc29-458a-b515-4512339e0155) - Glean - Remote - $185k – $260k/yr
- [Application Security Engineer](https://hotfix.jobs/jobs/c14cd542-12a5-42f6-baef-8f3a18440238) - Glean - Remote - $185k – $260k/yr

**Apply:** https://hotfix.jobs/jobs/99797080-4b95-46be-803c-d22bc230444a
**Canonical:** https://hotfix.jobs/jobs/99797080-4b95-46be-803c-d22bc230444a