Security Engineer - Platform Security

xAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates.

We are seeking a talented and driven Security Engineer to join Platform Security team, where you will build cutting-edge security solutions to protect our Kubernetes-based infrastructure and advance secure AI-driven systems. In this role, you will design and implement AI-powered security tools, proactively address vulnerabilities, and champion secure engineering practices across the organization. Ideal candidates are passionate about impactful innovation, excel at writing clean, efficient code, and thrive in fast-paced environments to support xAI’s mission of creating a trusted and secure global digital platform.

• →Design and build AI-driven security tooling and agents using Grok to identify, analyze, and mitigate vulnerabilities in the platform infrastructure and customer facing application(s)
• →Proactively identify security problems to solve and own the design and implementation end-to-end
• →Collaborate and be a security champion while driving technical decisions across the organization

• 3+ years of experience in fast-paced, high-impact environments, ideally at startups or tech-driven companies.
• Expertise in Python, Rust, or Go, with strong problem-solving skills and a focus on clean, efficient code.
• Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar preferred.
• Proven experience building tools or systems from scratch, with a focus on scalable solutions.
• Proficiency in designing scalable backend architectures to support secure systems.
• Familiarity with security testing frameworks (e.g., Burp Suite, OWASP ZAP, SAST/DAST).
• Experience with Docker and Kubernetes for deploying and securing containerized applications.
• Knowledge of software supply chain tools, including SBOM management and dependency scanning.

• Experience developing AI-driven security tools or integrating AI into security workflows.
• Familiarity with Kubernetes-based environments and securing cloud-native infrastructure.
• Proven ability to drive technical decisions and influence security practices across teams.
• A passion for challenging the status quo and building transformative security solutions.
• Strong collaboration skills, with experience working in dynamic, cross-functional teams.
• A sense of humor and adaptability to thrive in a fast-paced, mission-driven environment.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.