Product Security Engineer - Public Sector, Code & Cloud Guardian

Scale AI; St. Louis (MO); On-site; USD 148,800 - 256,000; Full time

Benefits offered by this job

Comprehensive health, dental andVision

Retirement benefits

Learning and development stipend

Generous PTO

Commuter stipend

Job summary

Scale AI is seeking a highly technical Product Security Engineer for the Public Sector Infrastructure & Security team. You will conduct in-depth code reviews, implement security best practices, and influence security strategy while working with TypeScript, Python, Kubernetes, CI/CD, and Terraform orchestration.

You will guide teams, perform SAST/DAST, and articulate vulnerability impact and exploitability to stakeholders.

Qualifications

• Secret level government security clearance preferred.
• Proficiency in NodeJS, TypeScript, Python, and/or Kubernetes.
• Strong understanding of modern Javascript application design.
• Production experience with Kubernetes backed services.
• Hands-on experience with SAST and DAST tools and methodologies.
• Familiarity with terraform orchestration for infrastructure management.
• You can structure complex problems and diagnose root causes independently.

Responsibilities

• Conduct in-depth code reviews to identify and remediate security vulnerabilities.
• Evaluate and enhance the security of our product offerings through RFC and service review.
• Implement and maintain CI/CD pipelines with a strong focus on security.
• Perform SAST and DAST to identify vulnerabilities in production code.
• Utilize terraform orchestration to ensure secure infrastructure management.
• Guide engineering teams to build robust long-term security solutions.
• Explain mechanics and significance of vulnerabilities and their impact.
• Influence the security strategy and drive continuous improvement.

Skills

TypeScript

Python

Kubernetes

CI/CD

SAST

DAST

Terraform

Tools

NodeJS

SAST Tools

DAST Tools

Terraform Orchestration

Job description

Scale AI is seeking a highly technical Product Security Engineer for the Public Sector Infrastructure & Security team. You will conduct in-depth code reviews, implement security best practices, and influence security strategy while working with TypeScript, Python, Kubernetes, CI/CD, and Terraform orchestration.

You will guide teams, perform SAST/DAST, and articulate vulnerability impact and exploitability to stakeholders.