Product Security Engineer: AI/ML Security & DevSecOps

Scale; New York, San Francisco, Seattle, Washington (NY, CA, WA, District of Columbia); On-site; USD 238,000 - 297,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Vision coverage

Retirement benefits

Learning stipend

Paid time off

Job summary

Scale is seeking a highly technical Security Engineer to join the Product Security team in the US. You will conduct code reviews, implement security best practices, and influence security strategy across the product portfolio.

Expertise in TypeScript, Python, AWS, CI/CD, SAST, DAST, and Terraform orchestration is essential to identify and mitigate vulnerabilities. Responsibilities include building security tooling for the AI/ML stack, maintaining secure CI/CD pipelines, and guiding engineers on

Qualifications

• Experience building and reviewing security in product-focused environments.
• Ability to design and implement security tooling across software stack.
• Strong knowledge of modern security practices for cloud-native apps.

Responsibilities

• Leverage broad product security expertise to build and maintain software tooling that secures every layer of the modern AI/ML software ecosystem.
• Conduct in-depth code reviews to identify and remediate security vulnerabilities.
• Evaluate and enhance the security of our product offerings, through RFC and service review.
• Implement and maintain CI/CD pipelines with a strong focus on security.
• Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify vulnerabilities in production code.
• Utilize terraform orchestration to ensure secure and efficient infrastructure management.
• Guide engineering teams to build robust long-term solutions that consider security and privacy.
• Clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact.
• Influence the security strategy and direction of the team, advocating for best practices and continuous improvement.

Skills

TypeScript

Python

AWS

CI/CD

SAST

DAST

NodeJS

Communication

Tools

Terraform

Kubernetes

SAST tools

DAST tools

Job description

Scale is seeking a highly technical Security Engineer to join the Product Security team in the US. You will conduct code reviews, implement security best practices, and influence security strategy across the product portfolio.

Expertise in TypeScript, Python, AWS, CI/CD, SAST, DAST, and Terraform orchestration is essential to identify and mitigate vulnerabilities. Responsibilities include building security tooling for the AI/ML stack, maintaining secure CI/CD pipelines, and guiding engineers on