Security & Infrastructure Engineer

About the role

You'll own our certification programs and the security and infrastructure underneath them — across our multi-account AWS organization, GCP footprint, and internal engineering platform. This role covers our own corporate and cloud environments, not customer plant-floor or control-system security. This role is ideal for candidates who want real, ongoing ownership of a security function, including standing up and running one of the industry's first AI management systems, at a company where trust and compliance directly determine whether customers deploy the platform at all.

Required Qualifications

• Professional experience in security engineering, infrastructure/platform engineering, or a closely related technical role — broad competence across security, networking, and operating systems, with real depth in at least one
• Deep hands-on experience with: Security fundamentals — trust boundaries and blast radius, authentication vs. authorization, least privilege, secrets handling, and judging real-world exploitability of findings
• Networking — diagnosing connectivity issues across routing, firewalls/security groups, DNS, TLS termination, and proxies; comfortable with VPN/private connectivity and packet captures
• Linux operating systems — processes, filesystems, permissions, systemd, resource limits, log analysis, and how containers relate to the host
• Cloud infrastructure — hands-on with AWS or GCP beyond the console: IAM, networking, compute, and their failure modes
• Strong scripting/automation skills (Python, Bash, Go, or similar) — recurring manual work gets scripted away, not tracked by hand
• Strong writing ability: control narratives, runbooks, postmortems, audit responses, risk assessments
• Prioritize and defend your judgment under ambiguity — able to rank findings honestly and defend the ranking
• CS/CE degree or equivalent hands-on experience

Preferred Qualifications

• Hands-on ISO 27001 experience — operating an ISMS, recertification, surveillance audits, internal audit programmes, Statement of Applicability, risk treatment
• SOC 2 experience in practice — producing evidence, answering auditor requests, remediating findings against a real deadline
• Any exposure to AI governance or ISO 42001 — AI risk assessment, model inventory, AI lifecycle controls, the EU AI Act
• Infrastructure as code at scale (Pulumi primarily, Terraform secondarily — deep Terraform experience transfers fine)
• Multi-account cloud organization experience: landing zones, org-level policy guardrails, centralized logging, cross-account access patterns
• Identity provider and endpoint management at scale (Google Workspace or Microsoft 365, SSO/SAML/OIDC, MDM and device compliance tooling)
• Cloud security tooling experience (CSPM, SAST/SCA, vulnerability management platforms), including their false-positive rates
• Container orchestration on ECS, EKS, or Kubernetes
• Observability: metrics, logs, traces, and the judgment to instrument what will matter later
• Experience across both AWS and GCP, including workload identity federation
• Cloud cost awareness — you notice when spend and value diverge
• Startup or high-growth experience building process rather than following one

What Success Looks Like

• You can own ambiguous, high-stakes security and compliance problems end-to-end
• Controls you build hold automatically as the company scales — you design for guardrails that fail closed, not recurring manual verification
• You bring strong technical judgment on tradeoffs between security rigor, velocity, and cost
• You raise the bar for security rigor and operational discipline across the team
• You help define what's next for the security program, not just execute what's known

Why Join Nexxa.ai?

• Innovative Environment: Play a critical role in transforming heavy industries through groundbreaking AI and automation technologies
• Collaborative Culture: Be part of a team that values innovation, discipline, and continuous improvement
• Professional Growth: Benefit from significant opportunities for career development and advancement
• Competitive Compensation: Enjoy a comprehensive salary and equity package reflective of your expertise and contributions