Product Security Engineer, Public Sector — Secure Systems

Scale AI, Inc.; Washington (District of Columbia); On-site; USD 178,400 - 307,000; Full time

Benefits offered by this job

Health benefits

Dental & Vision

Retirement plan

Learning stipend

Generous PTO

Commuter stipend

Job summary

Scale AI, Inc. is seeking a highly technical Product Security Engineer to join the Public Sector Infrastructure & Security team.

You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy across products and services. You will help build robust long-term security solutions, structure complex problems, diagnose root causes, and clearly explain vulnerability mechanics and impacts to both technical and non-technical stakeholders.

Qualifications

• Proficiency in NodeJS, TypeScript and Python, with strong Kubernetes experience.
• Experience implementing security in CI/CD pipelines and infrastructure as code (Terraform).
• Hands-on with SAST/DAST tools and secure software development lifecycles.
• Ability to perform in-depth code reviews and identify security vulnerabilities in production code.

Responsibilities

• Conduct in-depth code reviews to identify and remediate security vulnerabilities.
• Evaluate and enhance security through RFCs and service reviews.
• Implement and maintain secure CI/CD pipelines.
• Perform SAST and DAST to identify vulnerabilities in production code.
• Utilize Terraform orchestration for secure infrastructure management.
• Guide engineering teams to build robust long-term security solutions.

Skills

NodeJS

TypeScript

Python

Kubernetes

Security best practices

Threat modeling

Code reviews

SAST/DAST

Tools

Terraform

Git

CI/CD tooling

Job description

Scale AI, Inc. is seeking a highly technical Product Security Engineer to join the Public Sector Infrastructure & Security team.

You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy across products and services. You will help build robust long-term security solutions, structure complex problems, diagnose root causes, and clearly explain vulnerability mechanics and impacts to both technical and non-technical stakeholders.