Product Security Engineer: Secure AI/ML on AWS

United States Digital Space LLC; New York, Washington (NY, District of Columbia); On-site; USD 238,000 - 297,000; Full time

Job summary

United States Digital Space LLC is seeking a highly technical Security Engineer to join our Product Security team. You will conduct in-depth code reviews, implement security best practices, and influence our security strategy for AI/ML software ecosystems.

The role requires hands-on experience with TypeScript, Python, AWS, CI/CD, SAST, DAST, and Terraform. You will guide engineering teams, communicate complex vulnerabilities clearly, and help scale secure infrastructure across our products.

Qualifications

• Experience in security engineering focused on product security.
• Ability to conduct in-depth code reviews and identify vulnerabilities.
• Experience implementing security in CI/CD pipelines and infrastructure as code.
• Familiarity with SAST/DAST and modern web app architectures.

Responsibilities

• Conduct in-depth code reviews to identify and remediate vulnerabilities.
• Evaluate and enhance security across product offerings and services.
• Implement secure CI/CD pipelines and infrastructure as code processes.
• Perform SAST/DAST on production code to identify vulnerabilities.
• Utilize Terraform orchestration for secure infrastructure management.
• Explain vulnerability mechanics and potential impacts clearly to stakeholders.

Skills

Security engineering

Product security

Code reviews

Threat modeling

Exploitability analysis

Tools

TypeScript

Python

Node.js

AWS

CI/CD

SAST

DAST

Terraform

Kubernetes

Job description

United States Digital Space LLC is seeking a highly technical Security Engineer to join our Product Security team. You will conduct in-depth code reviews, implement security best practices, and influence our security strategy for AI/ML software ecosystems.

The role requires hands-on experience with TypeScript, Python, AWS, CI/CD, SAST, DAST, and Terraform. You will guide engineering teams, communicate complex vulnerabilities clearly, and help scale secure infrastructure across our products.