Nexxa.ai
Security & Infrastructure Engineer
SF Bay area · Hybrid · Full-time · Posted Aug 27, 2026
- Experience
- Professional experience required; no number of years stated.
- Education
- CS/CE degree or equivalent hands-on experience.
About the job
Own Nexxa’s security and compliance programs and the infrastructure underpinning them across its corporate environment, AWS organization, GCP footprint, and internal engineering platform.
What you'll do
- Run SOC 2 Type 2 and ISO 27001 compliance activities, including audit readiness and auditor and customer reviews.
- Triage security findings and remediate them through infrastructure as code, IAM policies, and pipeline configuration.
- Manage cloud and SaaS identity and access, internal IT operations, security controls, and production incident follow-up.
What they ask for
- Professional experience in security engineering, infrastructure/platform engineering, or a closely related technical role, with broad security, networking, and operating-systems competence and depth in at least one.
- Deep hands-on experience with security fundamentals, networking, Linux, and AWS or GCP cloud infrastructure.
- Strong scripting or automation skills (Python, Bash, Go, or similar) and strong writing ability.
- CS/CE degree or equivalent hands-on experience.
Nice to have
- Hands-on ISO 27001 or SOC 2 experience; exposure to AI governance or ISO 42001.
- Infrastructure as code at scale, multi-account cloud organizations, identity and endpoint management, cloud security tooling, container orchestration, or observability experience.
Tools
AWS, GCP, Python, Bash, Go, Pulumi, Terraform, Kubernetes
AI focus
Own and run an AI management system; preferred exposure includes AI governance, ISO 42001, AI risk assessment, model inventory, AI lifecycle controls, and the EU AI Act.
Model-written summary · the original posting is authoritative