Site Reliability Engineer - Cybersecurity

xAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates.

The Cybersecurity / SRE team is focused on ensuring the security and reliability of X Money. This role will primarily focus on the X Money platform but will also cross over with the X Social platform. The ideal candidate will have experience in the banking, money transmission, and P2P payments industry. We emphasize working with large distributed systems and security platforms at scale, with an automation-first mindset.

You’ll be responsible for securing and maintaining the reliability of X Money’s infrastructure. You’ll work closely with cross-functional teams to enhance security measures, improve system resilience, and implement best practices. Your role will include:

• →Build and secure mission-critical applications in a hybrid cloud environment.
• →Manage identities and roles effectively.
• →Monitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF).
• →Maintain a SIEM and all data pipelines needed for reliable alerting. 
• →Design and implement secure container standards and automation to enable frictionless developer workflows.
• →Maintain Kubernetes security aligned with current best practices.
• →Build, deploy, and maintain security operations infrastructure using Python, Terraform, and Puppet.
• →Secure and enhance CI/CD pipelines.
• →Integrate and maintain code scanning platforms.
• →Develop dashboards and alerts from security metrics.
• →Own security projects: identify issues and implement solutions.
• →Apply critical analysis and problem-solving skills.

• Proven experience securing hybrid AWS/on-premises environments, including IAM and overall security posture.
• Strong proficiency in Python, Terraform, and Puppet.
• Certifications like CISA, CRISC, CGEIT, Security+, CASP+, or similar preferred.
• Deep expertise in Kubernetes and container security.
• Hands-on expertise building GitHub Actions and workflows.
• Extensive experience with Prometheus, Grafana, CloudWatch, and Karma.
• Well versed in management and integrations of Wazuh
• Hands-on experience with security scanning tools (Semgrep, Trivy, Falco).
• Proactive mindset with strong ownership and problem-solving skills.
• Excellent critical thinking and analytical abilities.
• Located in the SF Bay Area or willing to relocate.

ITAR REQUIREMENTS:

To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.