Product Security Engineer, Public Sector — Secure by Design

Scale AI, Inc.; St. Louis (MO); On-site; USD 148,800 - 256,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Vision coverage

Retirement benefits

Learning & development stipend

Generous PTO

Commuter stipend

Job summary

Scale AI, Inc. is seeking a highly technical Product Security Engineer to join the Public Sector Infrastructure & Security team in St. Louis.

You will conduct code reviews, implement secure CI/CD, and drive security strategy across products and services, leveraging TypeScript, Python, Kubernetes, and Terraform. You will perform SAST/DAST on production code, guide engineering teams to secure infrastructure, and clearly explain vulnerabilities and their impact to stakeholders while advocating for

Qualifications

• Security-focused product experience preferred.
• Government security clearance a plus.

Responsibilities

• Conduct in-depth code reviews to identify and remediate security vulnerabilities.
• Evaluate and enhance security of product offerings through RFC and service review.
• Implement and maintain CI/CD pipelines with a focus on security.
• Perform SAST/DAST to identify vulnerabilities in production code.
• Utilize terraform orchestration for secure infrastructure management.
• Guide engineering teams to build robust long-term security solutions.
• Explain mechanics and significance of vulnerabilities to stakeholders.
• Influence security strategy and drive improvements within the team.

Skills

TypeScript

Python

Kubernetes

CI/CD

SAST

DAST

Terraform

NodeJS

JavaScript

Security architecture

Tools

Terraform

Job description

Scale AI, Inc. is seeking a highly technical Product Security Engineer to join the Public Sector Infrastructure & Security team in St. Louis.

You will conduct code reviews, implement secure CI/CD, and drive security strategy across products and services, leveraging TypeScript, Python, Kubernetes, and Terraform. You will perform SAST/DAST on production code, guide engineering teams to secure infrastructure, and clearly explain vulnerabilities and their impact to stakeholders while advocating for