Product Security Engineer — Secure AI/ML & CI/CD

Scale AI, Inc.; San Francisco (CA); On-site; USD 237,600 - 297,000; Full time

Benefits offered by this job

Health, dental, and vision coverage

Retirement benefits

Learning and development stipend

Generous PTO

Commuter stipend

Job summary

Scale AI, Inc. is seeking a highly technical Security Engineer to join our Product Security team.

You will conduct in-depth code reviews, implement security best practices, and influence our security strategy across the product stack. Proficiency in TypeScript, Python, AWS, CI/CD, SAST, DAST, and Terraform orchestration will be crucial as you guide engineering teams, diagnose root causes, and clearly explain vulnerability mechanics and impact.

Qualifications

• Proven experience as a Security Engineer focused on product security.
• Hands-on experience with SAST and DAST tools and methodologies.
• Familiarity with Terraform orchestration for infrastructure management.
• Strong ability to structure complex problems and diagnose root causes independently.
• Excellent communication skills for explaining security concepts to technical and non-technical stakeholders.
• Relevant security certifications (e.g., CISSP, CEH, OSCP) are a plus.

Responsibilities

• Build and maintain software tooling to secure the AI/ML software ecosystem.
• Conduct in-depth code reviews to remediate vulnerabilities.
• Evaluate and enhance security of product offerings through RFCs and reviews.
• Implement and maintain secure CI/CD pipelines.
• Perform SAST/DAST to identify vulnerabilities in production code.
• Guide engineering teams toward robust, long-term security solutions.

Skills

NodeJS TypeScript Python Kubernetes

Tools

Terraform

Job description

Scale AI, Inc. is seeking a highly technical Security Engineer to join our Product Security team.

You will conduct in-depth code reviews, implement security best practices, and influence our security strategy across the product stack. Proficiency in TypeScript, Python, AWS, CI/CD, SAST, DAST, and Terraform orchestration will be crucial as you guide engineering teams, diagnose root causes, and clearly explain vulnerability mechanics and impact.