Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 43 days ago

Security & Infrastructure Engineer

Nexxa.AI18 open roles

Where
SF Bay area
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity & Infrastructure EngineerNexxa.AI · SF Bay area

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Nexxa.AI's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.2% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.8%1 day
  2. 3.8%3 days
  3. 8.2%7 days
  4. 15.2%14 days
  5. 34.2%30 days
This job: posted 43 days ago

The posting

Nexxa is building the best AI systems for heavy industries — enabling machines, systems, and operations to think, decide, and act autonomously across manufacturing, large-scale infrastructure, logistics, and legacy environments.

Our mission is to translate deep technical breakthroughs into operational reality, solving some of the hardest systems-level problems in industry.

ABOUT THE ROLE

Selling autonomous systems into manufacturing, infrastructure, and logistics means our customers audit us before they trust us — security and compliance are a precondition for deploying our platform, not a function beside it.

We hold SOC 2 Type 2 and ISO 27001, and we're moving toward more certifications because governing autonomous industrial systems responsibly is a commercial requirement in our market. You'll own our certification programs and the security and infrastructure underneath them — across our multi-account AWS organization, GCP footprint, and internal engineering platform. This role covers our own corporate and cloud environments, not customer plant-floor or control-system security.

This role is ideal for candidates who want real, ongoing ownership of a security function, including standing up and running one of the industry's first AI management systems, at a company where trust and compliance directly determine whether customers deploy the platform at all.

WHAT YOU'LL DO

- Own the compliance calendar across SOC 2 Type 2 and ISO 27001 — evidence collection, access and vendor reviews, control monitoring, internal audit, management review, policy refresh, and audit readiness

- Triage security findings across cloud posture, code scanning, dependencies, and secrets, and drive remediation to closure

- Remediate what you triage directly in infrastructure as code, IAM policy, and pipeline configuration

- Administer identity and access across cloud and SaaS, including SSO/federation, least-privilege roles, and the joiner/mover/leaver lifecycle

- Support internal IT operations — endpoint fleet and device compliance, SaaS and license administration, asset inventory, support requests — while keeping the human cost of them flat as the company grows

- Serve as the working interface to external auditors, our certification body, and customer security and procurement reviews

- Build controls into infrastructure so they hold automatically, replacing manual verification with guardrails that fail closed

- Harden CI/CD and the software supply chain — build identity, artifact provenance, dependency and secret hygiene

- Debug production issues across cloud infrastructure, containers, and networking, and write the postmortem that keeps the fix from being forgotten

- Produce documentation others rely on: runbooks, control narratives, architecture notes, postmortems

REQUIRED QUALIFICATIONS

- Professional experience in security engineering, infrastructure/platform engineering, or a closely related technical role — broad competence across security, networking, and operating systems, with real depth in at least one

  • Deep hands-on experience with:
  • Security fundamentals — trust boundaries and blast radius, authentication vs. authorization, least privilege, secrets handling, and judging real-world exploitability of findings
  • Networking — diagnosing connectivity issues across routing, firewalls/security groups, DNS, TLS termination, and proxies; comfortable with VPN/private connectivity and packet captures
  • Linux operating systems — processes, filesystems, permissions, systemd, resource limits, log analysis, and how containers relate to the host
  • Cloud infrastructure — hands-on with AWS or GCP beyond the console: IAM, networking, compute, and their failure modes

- Strong scripting/automation skills (Python, Bash, Go, or similar) — recurring manual work gets scripted away, not tracked by hand

- Strong writing ability: control narratives, runbooks, postmortems, audit responses, risk assessments

- Proven judgment under ambiguity — able to rank findings honestly and defend the ranking

- CS/CE degree or equivalent hands-on experience

PREFERRED QUALIFICATIONS

- Hands-on ISO 27001 experience — operating an ISMS, recertification, surveillance audits, internal audit programmes, Statement of Applicability, risk treatment

- SOC 2 experience in practice — producing evidence, answering auditor requests, remediating findings against a real deadline

- Any exposure to AI governance or ISO 42001 — AI risk assessment, model inventory, AI lifecycle controls, the EU AI Act

- Infrastructure as code at scale (Pulumi primarily, Terraform secondarily — deep Terraform experience transfers fine)

- Multi-account cloud organization experience: landing zones, org-level policy guardrails, centralized logging, cross-account access patterns

- Identity provider and endpoint management at scale (Google Workspace or Microsoft 365, SSO/SAML/OIDC, MDM and device compliance tooling)

- Cloud security tooling experience (CSPM, SAST/SCA, vulnerability management platforms), including their false-positive rates

- Container orchestration on ECS, EKS, or Kubernetes

- Observability: metrics, logs, traces, and the judgment to instrument what will matter later

- Experience across both AWS and GCP, including workload identity federation

- Cloud cost awareness — you notice when spend and value diverge

- Startup or high-growth experience building process rather than following one

WHAT SUCCESS LOOKS LIKE

- You can own ambiguous, high-stakes security and compliance problems end-to-end

- Controls you build hold automatically as the company scales — you design for guardrails that fail closed, not recurring manual verification

- You bring strong technical judgment on tradeoffs between security rigor, velocity, and cost

- You raise the bar for security rigor and operational discipline across the team

- You help define what's next for the security program, not just execute what's known

WHY JOIN NEXXA.AI http://Nexxa.ai?

- Innovative Environment: Play a critical role in transforming heavy industries through groundbreaking AI and automation technologies

- Collaborative Culture: Be part of a team that values innovation, discipline, and continuous improvement

- Professional Growth: Benefit from significant opportunities for career development and advancement

- Competitive Compensation: Enjoy a comprehensive salary and equity package reflective of your expertise and contributions

If you're passionate about building the security and compliance backbone for advanced AI solutions in the real world, we'd love to connect.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Nexxa.AI's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Nexxa.AI's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Nexxa.AI's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.