Prepin
Log in
EXA AG

engineering opportunity

Security Engineer

You will build and maintain a protective security infrastructure for Exa's large-scale systems, including data processing and AI model training. This role involves managing security incident responses, implementing secrets management, and ensuring compliance across all engineering operations.

San Francisco, California, United StatesonsiteFULL_TIME

Posted

About the role

What will you do at EXA AG?

Exa is building a search engine from scratch to serve every AI application. We build massive-scale infrastructure to crawl the web, train state-of-the-art embedding models to index it, and develop super high performant vector databases in Rust to search over it. We also own a $5M H200 GPU cluster that regularly lights up tens of thousands of machines.

We are hiring a Security Engineer to build the protective shield for all of Exa’s systems. These systems include: processing web scale data, indexing hundreds of billions of pages, training foundational models on TBs of data, serving thousands of enterprise customers from our endpoints. You will be critical in making Exa run securely while ensuring our shipping velocity.

Desired Experience

You have hands-on experience in building and maintaining secure infrastructure

You know your way around cloud security fundamentals, including multi-account AWS permissions and architectures, IAM design, secure CI/CD pipelines

You are fluent in secrets management, key management, and certificate lifecycles (rotation, revocation, automation)

You have owned compliance efforts such as HIPPA, SOC2, etc.

You are comfortable with security hardening and any other details needed to make engineering systems run smoothly (VPN, development servers, etc.)

You are super vigilant about vulnerabilities, potential attacks, and abuse, and constantly think about how to operate securely with the introduction of new technologies (OS-level, AI coding agents, etc.)

Example Projects

Build a secrets management and rotation system used across distributed services, training jobs, and GPU clusters without impacting developer velocity

Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage

Create security incident response playbooks and lead incident handling, from detection to post-mortem

This is an in-person opportunity in San Francisco. We're happy to sponsor international candidates (e.g., STEM OPT, OPT, H1B, O1, E3). In addition to premium healthcare benefits (medical, dental, vision), we also offer fertility benefits and a monthly wellness stipend to all of our employees.

Exa is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, age, veteran status, marital status, pregnancy or related conditions, criminal histories consistent with applicable law, or any other basis protected by applicable law.

Which skills does this role require?

Cloud securityAWSIAM designCI/CD pipelinesSecrets managementKey managementCertificate lifecyclesComplianceHIPAASOC2Security hardeningIncident responseInfrastructure securityVulnerability managementSecurity EngineerInfrastructureIAMCI/CDSecrets ManagementVPNGPU ClusterAIIncident ResponseSecurity HardeningRustVector DatabasesAPI SecurityMonitoringAlertingCloud Security

Make your next move

Build a shortlist and prepare

Identify the requirements you can demonstrate, then choose examples from your work to discuss with the hiring team.

Review the responsibilities and requirements before adding an opening to your shortlist.

Role information can change. Confirm current details on the original application page.

Product

AI Candidate AgentCompaniesBrowse JobsDeep ProfileSkill AssessmentOpportunity Matching
Prepin.ai

© 2026 Prepin | All rights reserved.