ABOUT THE ROLE:

We are seeking a talented and motivated Cloud/Infrastructure Security Engineer to join our security team. In this role, you will be responsible for designing, implementing, and maintaining secure cloud infrastructure and ensuring the integrity of our cloud-native applications.

RESPONSIBILITIES:

• Design and implement secure cloud architectures across multiple cloud platforms (e.g., AWS, GCP, Azure)
• Develop and maintain Infrastructure as Code (IaC) templates with embedded security controls
• Conduct regular security assessments and audits of cloud infrastructure and services
• Implement and manage cloud security tools and services (e.g., CSPM, CWPP, CASB)
• Collaborate with development teams to ensure security best practices are integrated into CI/CD pipelines
• Monitor and respond to security events and incidents in cloud environments
• Develop and maintain cloud security policies, standards, and procedures
• Stay current with emerging cloud security threats and mitigation strategies

BASIC QUALIFICATIONS:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 3-5 years of experience in cloud security or related roles
• Strong understanding of cloud security principles, compliance frameworks, and best practices
• Proficiency in at least one cloud platform (AWS, GCP, or Azure) and associated security services
• Experience with Infrastructure as Code tools (e.g., Terraform, CloudFormation)
• Familiarity with containerization technologies and their security implications
• Knowledge of network security concepts and protocols
• Experience with scripting languages (e.g., Python, Bash) for automation and tool development

PREFERRED SKILLS AND EXPERIENCE:

• Relevant security certifications (e.g., CCSP, CSSK, AWS Security Specialty)
• Experience with multi-cloud environments and cloud-to-cloud security
• Knowledge of DevSecOps practices and tools
• Familiarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS)
• Experience with Kubernetes and container security
• Experience in building custom cloud security tools or integrations
• Interest in leveraging AI for cloud security monitoring and automation
• Contributions to open-source cloud security projects
• Experience with securing AI/ML workloads in cloud environments

COMPENSATION AND BENEFITS:

$200,000 - $340,000 USD

Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ABOUT THE ROLE:

We are seeking a skilled Azure Security Engineer to design, implement, and maintain robust security controls across our Azure Gov Cloud environment (including hybrid and multi-cloud scenarios). In this hands-on role, you will build, strengthen, and maintain our cloud security posture, protect critical workloads, and collaborate with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle. You will develop, implement, and leverage Microsoft’s native security tools to detect threats, respond to incidents, and ensure alignment with industry standards and regulations. Lastly, you will be required to both achieve and maintain compliance with government regulations such as FedRAMP and CMMC. 

RESPONSIBILITIES:

• Implement, design, and manage security architecture for Azure Government and Commercial deployments (with considerations for DoD IL5\IL6 and FedRAMP High controls)
• Configure and optimize Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, and related services for threat detection, vulnerability management, and automated response  
• Design and enforce identity & access management using Microsoft Entra ID, Privileged Identity Management (PIM), Conditional Access policies, RBAC, and just-in-time access  
• Secure network architectures with Azure Firewall, Network Security Groups (NSGs), DDoS Protection, Web Application Firewall (WAF), Network Watcher, and private endpoints  
• Protect data at rest and in transit via Azure Key Vault, encryption strategies, data classification, and information protection controls  
• Develop and maintain security policies, initiatives, and blueprints using Azure Policy and Microsoft Purview for compliance (NIST, FedRAMP, CMMC, STIGs, etc.)  
• Perform threat hunting, incident response, and forensics using Sentinel playbooks, Log Analytics, and KQL queries  
• Conduct security reviews of Infrastructure as Code (IaC), containers, Kubernetes (AKS), and serverless workloads  
• Collaborate with developers and architects to implement DevSecOps practices, including secure CI/CD pipelines, code scanning, and secure defaults  
• Monitor and remediate security findings, reduce attack surface, and improve overall security posture per the Microsoft Cloud Security Benchmark (MCSB) 
• Deploy configurations and compliance policies to Azure AVD endpoints using Intune and other Azure native services. 

BASIC QUALIFICATIONS:

• Active U.S. security clearance (e.g., Secret, Top Secret) or eligibility to obtain one. 
• 3+ years of experience in cloud security, cybersecurity engineering, or related roles (with strong Azure focus)  
• Deep hands-on expertise with core Azure security services: Microsoft Defender suite, Sentinel, Intune, Entra ID, Key Vault, Azure Policy, Firewall, Network Watcher, and Purview  
• Strong understanding of DLP implementation both in cloud and on endpoints utilizing Purview and other Microsoft native controls
• Experience implementing security in hybrid/multi-cloud environments  
• Proficiency in scripting/automation (PowerShell, Azure CLI, Bicep/ARM templates, Terraform)  
• Strong understanding of identity federation, zero-trust principles, encryption, network security, and vulnerability management  
• Familiarity with compliance frameworks (NIST, FedRAMP, CMMC, STIGs, etc.) and regulatory requirements  
• Excellent problem-solving, analytical, and communication skills
• Strong verbal and written communication skills and the ability to stay composed under pressure.

PREFERRED SKILLS AND EXPERIENCE:

• Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Cybersecurity Architect (SC-100)
• Additional relevant certifications (e.g., CISSP, CCSP, Microsoft Certified: Azure Administrator, AWS Security Specialty, SANS GCPS, SANS GCAD)  
• Deep experience with detection and response engineering and SOC operations
• Knowledge of container security (Docker, AKS), secure DevOps, or AI/ML workload protection  
• Prior experience in government regulations frameworks such as FedRAMP and CMMC. 

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

COMPENSATION AND BENEFITS:

$180,000 - $440,000 USD

Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ABOUT THE ROLE:

You will be responsible for leading day-to-day security threat management. You will help identify and manage potential incidents and work with partner teams on known or suspected security threats. You will support threat intelligence, threat hunting, intrusion detection, and incident response efforts that adhere to, and push forward, best practices. 

RESPONSIBILITIES:

• Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar preferred.
• Drive continual improvement in processes, procedures and automations to improve the quality and effectiveness of the team.
• Participate in a 24/7 on-call rotation performing security incident response
• Commandeering security incidents and updating stakeholders.
• Identify and develop new detection use cases and optimize existing detections.
• Collaborate on technical directions and solutions with other teams.
• Research and analyze patterns in security events across X’s global infrastructure.
• Identify, design, and lead threat hunting missions to quantify and reduce threats.
• Manage and support the log collection, security scanning, intrusion detection, and other security-related systems.
• Design and assist in the development of automation to reduce false positives and handle events automatically.
• Analyze the security posture of systems via testing and vulnerability impact analysis.

BASIC QUALIFICATIONS:

• 2+ years of relevant information security experience
• Self starter, can receive a task and execute with minimal supervision
• Strong Python scripting skills for implementing security automation
• Knowledge of networking and macOS, Windows or Linux operating systems.
• Knowledge of cloud security fundamentals and practices (vendor agnostic).
• Experience managing and/or deploying security technology.
• Experience with building queries and dashboards for security monitoring.
• Knowledge of current threats and techniques and a desire to research and learn more.
• Experience with malware analysis, forensics or penetration testing.
• Problem solving skills or experience with troubleshooting.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

PREFERRED SKILLS AND EXPERIENCE:

• Elastic / OpenSearch or similar platforms 
• Open Source security automation tooling

COMPENSATION AND BENEFITS:

$180,000 - $440,000 USD

Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ABOUT THE ROLE:

We are seeking a talented and driven Security Engineer to join Platform Security team, where you will build cutting-edge security solutions to protect our Kubernetes-based infrastructure and advance secure AI-driven systems. In this role, you will design and implement AI-powered security tools, proactively address vulnerabilities, and champion secure engineering practices across the organization. Ideal candidates are passionate about impactful innovation, excel at writing clean, efficient code, and thrive in fast-paced environments to support xAI’s mission of creating a trusted and secure global digital platform.

RESPONSIBILITIES:

• Design and build AI-driven security tooling and agents using Grok to identify, analyze, and mitigate vulnerabilities in the platform infrastructure and customer facing application(s)
• Proactively identify security problems to solve and own the design and implementation end-to-end
• Collaborate and be a security champion while driving technical decisions across the organization

BASIC QUALIFICATIONS:

• 3+ years of experience in fast-paced, high-impact environments, ideally at startups or tech-driven companies.
• Expertise in Python, Rust, or Go, with strong problem-solving skills and a focus on clean, efficient code.
• Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar preferred.
• Proven experience building tools or systems from scratch, with a focus on scalable solutions.
• Proficiency in designing scalable backend architectures to support secure systems.
• Familiarity with security testing frameworks (e.g., Burp Suite, OWASP ZAP, SAST/DAST).
• Experience with Docker and Kubernetes for deploying and securing containerized applications.
• Knowledge of software supply chain tools, including SBOM management and dependency scanning.

PREFERRED SKILLS AND EXPERIENCE:

• Experience developing AI-driven security tools or integrating AI into security workflows.
• Familiarity with Kubernetes-based environments and securing cloud-native infrastructure.
• Proven ability to drive technical decisions and influence security practices across teams.
• A passion for challenging the status quo and building transformative security solutions.
• Strong collaboration skills, with experience working in dynamic, cross-functional teams.
• A sense of humor and adaptability to thrive in a fast-paced, mission-driven environment.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

COMPENSATION AND BENEFITS:

$180,000 - $440,000 USD

Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ABOUT THE ROLE:

We are seeking a seasoned Senior Network Security Engineer to join our dynamic security team. The ideal candidate will possess deep expertise in network security technologies, focusing on switching and routing systems within cloud-native and AI-focused infrastructure. You will thrive in a fast-paced, challenging environment, demonstrating adaptability, excellent multitasking skills, and the drive to tackle complex security issues independently while ensuring robust protection for our innovative technologies.

RESPONSIBILITIES:

• Serve as a subject matter expert in network security, particularly firewalls, VPNs, IDS/IPS, routing protocols (e.g., BGP, OSPF), and switching technologies.
• Manage and update firewall configurations across our enterprise network to align with operational and security needs.
• Deploy new firewalls, switches, routers, and network security devices in response to evolving threats and demands.
• Develop and propose innovative network security solutions to address operational challenges in routing and switching environments.
• Enhance security processes through thorough documentation and change management.
• Act as the primary resolver for complex network security issues, including escalation support.
• Ensure network security systems, switches, and routers are up-to-date with patches, firmware, and maintenance.
• Monitor and respond to security events in cloud environments (e.g., AWS, GCP, Azure, Datacenter), with emphasis on network traffic analysis.

BASIC QUALIFICATIONS:

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field.
• 4+ years of experience in network security engineering, with hands-on focus on switching and routing.
• Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar preferred.
• Strong understanding of network security principles, protocols (e.g., TCP/IP, VLANs, ACLs), and best practices for secure routing and switching.
• Proficiency in at least one major cloud platform (AWS, GCP, or Azure) and its network security services (e.g., VPCs, Security Groups).
• Experience with network analysis tools such as Wireshark, tcpdump; and vendors including Cisco, Juniper, Palo Alto Networks.
• Familiarity with scripting languages (e.g., Python, Bash) for automation of network security tasks.

PREFERRED SKILLS AND EXPERIENCE:

• Relevant network-specific certifications (e.g., CCNP Security, CCIE Security, JNCIP-SEC, PCNSE).
• Experience in multi-cloud environments and Infrastructure as Code tools like Terraform for network provisioning.
• Knowledge of DevSecOps practices tailored to network security integration.
• Experience building custom tools or integrations for enhancing network security operations.
• Interest in leveraging AI for network threat detection and automation.
• Contributions to open-source projects in network security or related tools.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

COMPENSATION AND BENEFITS:

$180,000 - $440,000 USD

Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ABOUT THE ROLE:

The Cybersecurity / SRE team is focused on ensuring the security and reliability of X Money. This role will primarily focus on the X Money platform but will also cross over with the X Social platform. The ideal candidate will have experience in the banking, money transmission, and P2P payments industry. We emphasize working with large distributed systems and security platforms at scale, with an automation-first mindset.

You’ll be responsible for securing and maintaining the reliability of X Money’s infrastructure. You’ll work closely with cross-functional teams to enhance security measures, improve system resilience, and implement best practices. Your role will include:

RESPONSIBILITIES:

• Build and secure mission-critical applications in a hybrid cloud environment.
• Manage identities and roles effectively.
• Monitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF).
• Maintain a SIEM and all data pipelines needed for reliable alerting. 
• Design and implement secure container standards and automation to enable frictionless developer workflows.
• Maintain Kubernetes security aligned with current best practices.
• Build, deploy, and maintain security operations infrastructure using Python, Terraform, and Puppet.
• Secure and enhance CI/CD pipelines.
• Integrate and maintain code scanning platforms.
• Develop dashboards and alerts from security metrics.
• Own security projects: identify issues and implement solutions.
• Apply critical analysis and problem-solving skills.

BASIC QUALIFICATIONS:

• Proven experience securing hybrid AWS/on-premises environments, including IAM and overall security posture.
• Strong proficiency in Python, Terraform, and Puppet.
• Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar preferred.
• Deep expertise in Kubernetes and container security.
• Hands-on expertise building GitHub Actions and workflows.
• Extensive experience with Prometheus, Grafana, CloudWatch, and Karma.
• Well versed in management and integrations of Wazuh
• Hands-on experience with security scanning tools (Semgrep, Trivy, Falco).
• Proactive mindset with strong ownership and problem-solving skills.
• Excellent critical thinking and analytical abilities.
• Located in the SF Bay Area or willing to relocate.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

COMPENSATION AND BENEFITS:

$180,000 - $440,000 USD

Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ABOUT THE ROLE:

We are seeking a skilled and proactive Detection & Response Engineer to join our security team. In this critical role, you will be responsible for detecting, investigating, and responding to security incidents across our cloud-native and AI-focused infrastructure. You will play a key part in safeguarding our innovative technologies and sensitive data.

RESPONSIBILITIES:

• Monitor and analyze security alerts and logs to identify potential threats and anomalies
• Develop, implement, and maintain detection rules and correlation logic in our SIEM platform
• Conduct thorough investigations of security incidents, performing root cause analysis and impact assessments
• Lead incident response efforts, coordinating with relevant teams to contain and mitigate threats
• Create and maintain incident response playbooks and runbooks
• Perform regular threat hunting activities to proactively identify potential security risks
• Develop and refine metrics and reporting to track the effectiveness of detection and response capabilities
• Collaborate with other security teams to improve overall security posture and incident handling processes
• Stay current with emerging threats, attack techniques, and defensive strategies in the cloud-native and AI domains

BASIC QUALIFICATIONS:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 3-5 years of experience in security operations, incident response, or a similar role
• Strong understanding of cybersecurity principles, attack techniques, and defensive strategies
• Proficiency in at least one scripting language (e.g., Python, Rust) for automation and tool development
• Experience with SIEM platforms and log analysis tools
• Familiarity with cloud environments (e.g., AWS, GCP, Azure) and their security features
• Knowledge of network protocols, system administration, and common attack vectors
• Strong analytical and problem-solving skills with attention to detail
• Excellent communication skills and ability to work effectively under pressure

PREFERRED SKILLS AND EXPERIENCE:

• Relevant security certifications (e.g., GCIH, GCIA, SANS)
• Experience with threat intelligence platforms and their integration into detection processes
• Familiarity with AI/ML security implications, particularly those outlined in the OWASP LLM Top 10
• Knowledge of software supply chain security and SBOM analysis
• Experience with containerized environments and Kubernetes security
• Experience in building custom security tools or integrations to enhance detection and response capabilities
• Interest in leveraging AI to improve threat detection and automate response processes
• Contributions to open-source security projects or threat research
• Experience with digital forensics and malware analysis

COMPENSATION AND BENEFITS:

$200,000 - $340,000 USD

Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

ABOUT THE ROLE:

We are seeking a skilled and innovative Application Security Engineer to join our technology-driven company. In this role, you will be responsible for ensuring the security and integrity of our cloud-native applications and systems throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and emerging AI technologies.

RESPONSIBILITIES:

• Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in our applications
• Design and implement secure coding guidelines and best practices for development teams
• Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline
• Perform threat modeling and risk assessments for applications, developing mitigation strategies for potential risks
• Manage vulnerability tracking and remediation efforts, providing guidance to development teams
• Support incident response activities related to application security
• Stay current on emerging security threats and trends in cloud-native technologies and AI, continuously enhancing our security measures
• Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs)
• Address security concerns specific to AI and machine learning models, with a focus on the OWASP LLM Top 10

BASIC QUALIFICATIONS:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 3-5 years of experience in application security, with a strong focus on code security practices
• Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10)
• Proficiency in Python or Rust programming languages and experience with secure coding practices in these languages
• Experience securing CI/CD pipelines and implementing DevSecOps practices
• Familiarity with software supply chain security and SBOM generation tools
• Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis
• Understanding of AI/ML security implications, particularly those outlined in the OWASP LLM Top 10
• Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences

PREFERRED SKILLS AND EXPERIENCE:

• Experience with cloud platforms (e.g., GCP, AWS, Azure) and their security features
• Relevant security certifications (e.g., CSSLP, OSWE)
• Background in data privacy and compliance regulations relevant to cloud-native applications and AI systems
• Experience with GitOps and infrastructure-as-code security
• Familiarity with federated learning and privacy-preserving machine learning techniques
• Experience in building custom security tooling to enhance and automate security processes
• Interest in leveraging AI to automate security tasks and improve efficiency
• Contributions to open-source security projects or tools
• Experience in securing AI/ML models and data pipelines

COMPENSATION AND BENEFITS:

$200,000 - $340,000 USD

Base salary is just one part of our total rewards package at xAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.