2 months ago
Base Salary
$180k - $350k/yr
Responsibilities
- Build and maintain secure infrastructure across Exa’s distributed services, training jobs, GPU clusters, APIs, and internal systems.
- Design cloud security controls, including multi-account AWS permissions, architectures, and IAM.
- Develop secure CI/CD pipelines and manage secrets, keys, and certificate rotation, revocation, and automation.
- Own compliance efforts such as HIPPA and SOC2.
- Harden engineering systems, including VPNs and development servers, against vulnerabilities, attacks, and abuse.
- Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage.
- Create security incident response playbooks and lead incident handling through post-mortems.
Requirements
- Hands-on experience building and maintaining secure infrastructure.
- Knowledge of cloud security fundamentals, multi-account AWS permissions and architectures, IAM design, and secure CI/CD pipelines.
- Fluency in secrets management, key management, and certificate lifecycles.
- Experience owning compliance efforts such as HIPPA and SOC2.
- Comfort with security hardening and operational security details including VPNs and development servers.
- Strong vigilance around vulnerabilities, attacks, abuse, and the security implications of new technologies.
Benefits
- In-person work in San Francisco.
- International visa sponsorship is available, including STEM OPT, OPT, H1B, O1, and E3.
- Premium medical, dental, and vision healthcare benefits.
- Fertility benefits.
- Monthly wellness stipend.
About Exa
Exa builds a web-scale search engine and API for AI agents and developer applications, combining its own crawler, embedding models, and high-performance vector search. It sells usage-based APIs and enterprise integrations that power retrieval-augmented generation, browsing, and automation on live web content. The company runs large crawling infrastructure and dedicated GPU clusters to continuously index and embed pages, and ships low-latency search components written in Rust.