Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 7 hours agoWe saw it 67 min after it went up

Infrastructure Security Engineer (Bare Metal & Platform)

xAI305 open roles

Where
Palo Alto, CA; Austin, TX; New York, NY; Seattle, WA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInfrastructure Security Engineer (Bare Metal & Platform)xAI · Palo Alto, CA; Austin, TX; New York, NY; Seattle, WA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on xAI's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.3% of postings close within 7 days. Measured by our own scanner across the market. xAI postings stay open a median of 39 days.

Share of postings closed within
  1. 1.9%1 day
  2. 4.0%3 days
  3. 8.3%7 days
  4. 15.3%14 days
  5. 34.2%30 days
This job: posted 7 hours ago

xAI median: 39 days open

The posting

SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates.

ABOUT THE ROLE:

We are seeking a hands-on Infrastructure Security Engineer to build and secure SpaceXAI’s infrastructure from the bare-metal layer up through the platform and application stack. In this role, you will design, implement, and harden physical and private-cloud foundations—servers, networks, identity, and orchestration—and carry that security posture into containers, automation, and hybrid connectivity with public cloud.

This role focuses on securing critical infrastructure spanning data centers, colo, and hybrid environments, with work that may span platforms such as SpaceXAI, X Social, X Money, and related systems. You’ll operate with an automation-first mindset: building secure foundations at the metal and OS layer, hardening platforms at scale, and partnering closely with engineering so security is embedded in how we build and run systems—not bolted on after the fact.

RESPONSIBILITIES:

Bare metal, data center & network security

  • Design and implement secure bare-metal and private-cloud architectures (servers, storage, out-of-band management, BIOS/UEFI/BMC firmware posture)
  • Harden physical and virtual fleets: OS baselines (Linux/Windows), CIS benchmarks, patch and vulnerability management, and secure boot / measured boot where applicable
  • Hands-on firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security
  • Build and secure network foundations: segmentation, load balancers, DNS, PKI, NAC, and IDS/IPS on real hardware
  • Own hybrid connectivity between on-premises and cloud (site-to-site VPN, Direct Connect / Interconnect / ExpressRoute, SD-WAN, zero-trust access)
  • Manage identities and privileged access across Active Directory / LDAP / Kerberos and cloud IAM (federation, SAML/OIDC, PAM)
  • Assist with security assessments and audits of physical, on-premises, and hybrid infrastructure
  • Monitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF, GDPR, HIPAA)

Platform, containers & developer enablement

  • Design and implement secure container and Kubernetes standards on bare metal and private cloud (not only managed EKS/GKE/AKS), including RBAC, network policy, and secrets
  • Develop and maintain Infrastructure as Code and configuration management—especially Puppet—with embedded security controls for physical and virtual fleets
  • Collaborate with development teams so security best practices are integrated into CI/CD pipelines
  • Secure and enhance CI/CD pipelines; integrate and maintain code and image scanning platforms

Detection, operations & tooling

  • Monitor and respond to security events and incidents spanning bare metal, network devices, hosts, and hybrid cloud
  • Maintain SIEM data pipelines that ingest on-premises network, host, and cloud telemetry for reliable alerting
  • Build, deploy, and maintain security operations infrastructure using Python, Terraform, and Puppet
  • Develop dashboards and alerts from security metrics across physical and platform layers
  • Develop and maintain infrastructure security policies, standards, and procedures from metal through platform
  • Own security projects end to end: identify issues and implement solutions
  • Stay current with emerging threats and mitigations for bare-metal, firmware, network, and hybrid-cloud infrastructure

BASIC QUALIFICATIONS:

  • Bachelor's degree in Computer Science, Cybersecurity, or a related field
  • 3–5 years of experience in infrastructure security, platform security, or related hands-on roles
  • Proven experience securing bare-metal, data-center, or private-cloud environments (not cloud-only resumes)
  • Hands-on experience with firmware, BMC/iDRAC/iLO, PXE/Kickstart provisioning, and hardware lifecycle security
  • Strong proficiency with Puppet for configuration management and fleet hardening in production
  • Strong understanding of network security concepts and protocols, including hands-on work with firewalls, segmentation, and hybrid connectivity
  • Experience with hybrid identity (AD/LDAP or similar) integrated or federated with cloud IAM
  • Experience with Infrastructure as Code (e.g., Terraform) applied to physical or VM fleets
  • Familiarity with containerization and Kubernetes security implications, including on-premises or bare-metal clusters
  • Experience with languages (e.g., Python, Bash and Golang) for automation and tool development
  • Familiarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS, NIST CSF)
  • Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms
  • Proactive mindset with strong ownership, critical thinking, and problem-solving skills
  • Located in the SF Bay Area, Austin, New York, Palo Alto, or Seattle, or willing to relocate to a US office

PREFERRED SKILLS AND EXPERIENCE:

  • Deep expertise operating and securing physical server fleets, colo, or private cloud (VMware, OpenStack, Proxmox, Nutanix, or similar)
  • Relevant security certifications (e.g., CCSP, CSSK, OSCP, network or cloud security specialty)
  • Strong proficiency with Python and Terraform on production fleets
  • Deep expertise in Kubernetes and container security on bare metal or private cloud
  • Experience with multi-cloud and cloud-to-on-prem security
  • Knowledge of CI/CD best practices and tools; hands-on GitHub Actions or equivalent
  • Experience with observability and security operations tooling (e.g., Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh)
  • Experience building custom security tools or integrations
  • Interest in leveraging AI for infrastructure security monitoring and automation
  • Contributions to open-source infrastructure or security projects
  • Experience securing AI/ML and GPU workloads on bare metal or hybrid infrastructure

COMPENSATION AND BENEFITS:

$100,000 - $258,000 USD

Base salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

SpaceXAI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against xAI's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on xAI's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    xAI's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.