The ad says“Build Exa’s detection, investigation, incident response, crisis management, and recovery capabilities; serve as the accountable leader during significant security incidents”
The ad says“Build Exa’s detection, investigation, incident response, crisis management, and recovery capabilities; serve as the accountable leader during significant security incidents”
The ad says“Lead security governance, regulatory readiness, compliance, and customer assurance, including programs such as SOC 2 and ISO 27001”
The ad says“Own security architecture and engineering across Exa’s products, APIs, web-scale data pipelines, cloud environments, Kubernetes clusters, model-training systems, GPU infrastructure, and internal platforms”
The ad says“Lead security governance, regulatory readiness, compliance, and customer assurance, including programs such as SOC 2 and ISO 27001”
The ad says“Build security into the product-development lifecycle through threat modeling, architecture reviews, secure defaults, automated controls, vulnerability management, offensive testing, and engineering education”
The ad says“Build security into the product-development lifecycle through threat modeling, architecture reviews, secure defaults, automated controls, vulnerability management, offensive testing, and engineering education”
Establish Exa’s security posture and risk appetite in partnership with the founders and executive team
Provide leadership with clear, decision-ready assessments of material risks, incidents, investments, and tradeoffs
Own security architecture and engineering across Exa’s products, APIs, web-scale data pipelines, cloud environments, Kubernetes clusters, model-training systems, GPU infrastructure, and internal platforms
Protect customer data, proprietary models, training data, source code, credentials, and other high-value assets from external attacks, insider threats, supply-chain compromise, and misuse
Build security into the product-development lifecycle through threat modeling, architecture reviews, secure defaults, automated controls, vulnerability management, offensive testing, and engineering education
Establish identity, access, secrets, key, certificate, and service-trust systems across human users, workloads, training jobs, and AI agents
Build Exa’s detection, investigation, incident response, crisis management, and recovery capabilities; serve as the accountable leader during significant security incidents
Own corporate security, including endpoints, SaaS applications, employee access, security awareness, insider risk, physical-security interfaces, and third-party risk
Lead security governance, regulatory readiness, compliance, and customer assurance, including programs such as SOC 2 and ISO 27001
Represent Exa’s security program in strategic customer conversations, enterprise reviews, audits, and other high-trust settings
Define the security organization’s structure, budget, technology strategy, external partnerships, and hiring plan
Recruit, develop, and lead an exceptional security team while creating a culture in which every team shares responsibility for security
Establish meaningful security metrics and regularly communicate Exa’s posture, priorities, and progress to company leadership
Preferred experience
You have built or led security at a technically ambitious, rapidly growing infrastructure, AI, developer-platform, cloud, or enterprise-software company
You combine executive judgment with deep technical credibility. You can move comfortably between company strategy, business risk, system architecture, incident investigation, and implementation details
You have operated with company-wide accountability for security—not merely responsibility for an individual security discipline
You approach unfamiliar problems with the mindset of both a builder and an attacker, and you are energized by security challenges for which no established playbook exists
