The opportunity
Anyscale’s product security needs are growing as we ship to larger and more demanding customers. We’re looking for a Senior Product Security Engineer to own our secure software development lifecycle and to be engineering’s partner on building security into the product.
What you'll do
Own and operate a scalable secure software development lifecycle: threat modeling, security requirements, secure design practices, and scanning that engineering can readily adopt.
Define how our SSDL works when AI writes and ships code: guardrails, review, and scanning for coding agents, MCP integrations, and LLM-powered features.
Partner with engineering on security features and secure-by-design: architecture, from early design through implementation.
Extend product security down to the platform it runs on: cloud IAM and service roles, Kubernetes and container security, and service-to-service trust on the path to customer data.
Review the security of existing systems and new initiatives, and turn: findings into prioritized, actionable work.
Own vulnerability management for what we ship: enumerate components, map known vulnerabilities, and produce accurate posture reporting on demand.
What they're looking for
- Drive vulnerabilities to resolution with engineering against defined SLAs.
- Own software composition analysis, secret scanning, and SAST across product: repositories, and set the bar for secure-development checks.
- Mentor other engineers and raise the security bar across the organization.
- + years in product or application security, with senior-level depth, ideally at a high-growth startup.