Senior Product Security Engineer

LanceDB; Deutschland; Vor Ort; EUR 80.000 - 110.000; Vollzeit

Zusammenfassung

LanceDB is looking for a security-focused engineer to enhance the security of our platform, ensuring adherence to best practices across all areas of our product.

The ideal candidate will have over 8 years of software engineering experience, a strong understanding of large-scale data platforms, and a proven track record in building security features. Responsibilities include deploying security tools, managing vulnerabilities, and collaborating closely with other engineers.

Qualifikationen

• 8+ years as a software engineer.
• Experience with data platforms like databases and ML/AI systems.
• Strong communication skills to drive alignment.

Aufgaben

• Select and deploy security tooling across all environments.
• Identify and remediate security risks including access controls.
• Own vulnerability management and support compliance testing.

Kenntnisse

Software engineering

Data platforms expertise

Security tooling

Communication skills

Open source contributions

Jobbeschreibung

Role

• Our first security-focused engineer
• Takes high-level direction (e.g., "identify top five security-related gaps for AX") and drives to results
• Success looks like a LanceDB platform that follows security-related best practices, and an ongoing partnership with other engineers to continuously enhance our security posture in all areas of the product

Day-to-day

• Select, deploy and tune security tooling across all relevant repos and environments, ensuring full coverage
• Identify and remediate security-related risks, including but not limited to cloud IAM, access controls, product vulnerabilities
• Own vulnerability management, from running our CVE program through closely working with other engineers on specific remediations
• Support periodic evidence collection and control testing for compliance commitments
• Apply relevant industry trends, best practices, and specific vulnerabilities to our product

Qualifications

• 8+ years as a software engineer
• Experience working on large-scale data platforms (e.g., databases, data infra, ML/AI systems), including work on concurrency and multitenancy
• Experience building encryption, authentication, authorization features for shipping products at high throughput
• Experience with CSP stacks, including object storage security, disk/volume encryption, key rotation, etc.
• Demonstrated ownership of ambiguous projects with minimal guidance
• Strong written and verbal communication (can drive alignment across teams)
• Comfortable using data (metrics, experiments, usage) to guide decisions
• Experience contributing to or working with open source communities