> Markdown version of [/jobs/ext/2719969-security-engineer](https://www.wearedevelopers.com/jobs/ext/2719969-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Exa Corporation
- **Location:** San Francisco, CA, United States
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Systems Engineering, Computer Clusters, Virtual Private Networks (VPN), Key Management
- **Published:** September 4, 2026
- **Apply:** https://startup.jobs/software-engineer-security-exa-7809848

## About the Role

* You have hands-on experience in building and maintaining secure infrastructure
 * You know your way around cloud security fundamentals, including multi-account AWS permissions and architectures, IAM design, secure CI/CD pipelines
 * You are fluent in secrets management, key management, and certificate lifecycles (rotation, revocation, automation)
 * You have owned compliance efforts such as HIPPA, SOC2, etc.
 * You are comfortable with security hardening and any other details needed to make engineering systems run smoothly (VPN, development servers, etc.)
 * You are super vigilant about vulnerabilities, potential attacks, and abuse, and constantly think about how to operate securely with the introduction of new technologies (OS-level, AI coding agents, etc.)

## Description

* Build a secrets management and rotation system used across distributed services, training jobs, and GPU clusters without impacting developer velocity
 * Build monitoring and alerting for anomalous behavior across APIs, internal services, and customer usage
 * Create security incident response playbooks and lead incident handling, from detection to post-mortem

This is an in-person opportunity in San Francisco. We're happy to sponsor international candidates (e.g., STEM OPT, OPT, H1B, O1, E3). In addition to premium healthcare benefits (medical, dental, vision), we also offer fertility benefits and a monthly wellness stipend to all of our employees.


## Related Videos

- [This Machine Ends Data Breaches](https://www.wearedevelopers.com/videos/574-this-machine-ends-data-breaches)
- [How to develop an autonomous car end-to-end: Robotic Drive and the mobility revolution](https://www.wearedevelopers.com/videos/22-how-to-develop-an-autonomous-car-end-to-end-robotic-drive-and-the-mobility-revolution)
- [Model Based Systems Engineering in an Agile Product Development Process](https://www.wearedevelopers.com/videos/68-model-based-systems-engineering-in-an-agile-product-development-process)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Pragmatic Blockchain Design Patterns: Integrating Blockchain into Business Processes](https://www.wearedevelopers.com/videos/1579-pragmatic-blockchain-design-patterns-integrating-blockchain-into-business-processes)
- [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data)

## Related Articles

- [Security Basics for Vibe Coders](https://www.wearedevelopers.com/magazine/598-security-basics-for-vibe-coders)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: 5 Security and Privacy Tools for Developers](https://www.wearedevelopers.com/magazine/710-the-overflow-5-security-and-privacy-tools-for-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)