Product Security Engineer — Secure CI/CD & SAST/DAST

Scale AI, Inc.; Washington (District of Columbia); On-site; USD 228,800 - 286,000; Full time

Job summary

Scale AI, Inc. seeks a highly technical Security Engineer to join our Product Security team. You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy across our AI/ML products and services.

Requirements include expertise in TypeScript, Python, AWS, CI/CD, SAST/DAST, and Terraform orchestration; you will diagnose root causes independently and clearly explain the mechanics and significance of vulnerabilities.

Qualifications

• Must independently drive multi-month security initiatives from problem definition through execution.
• Proven Security Engineer with a focus on product security.
• Familiar with NodeJS, TypeScript, Python, and Kubernetes, and AWS at scale.
• Hands‑on with SAST/DAST tools and secure infrastructure.

Responsibilities

• Build and maintain security tooling for every layer of the AI/ML software stack.
• Conduct in-depth code reviews to identify and remediate vulnerabilities.
• Evaluate and enhance security through RFCs and service reviews.
• Implement and maintain CI/CD pipelines with a strong focus on security.
• Perform SAST and DAST on production code to identify vulnerabilities.
• Utilize Terraform orchestration to ensure secure infrastructure management.
• Guide engineering teams to build robust long‑term security solutions.
• Clearly explain vulnerability mechanics, exploitability, and impact.
• Influence security strategy and drive continuous improvement.

Skills

NodeJS

TypeScript

Python

Kubernetes

AWS

CI/CD

SAST

DAST

Terraform

Security certs

Tools

SAST tools

DAST tools

Terraform

CI/CD tooling

Job description

Scale AI, Inc. seeks a highly technical Security Engineer to join our Product Security team. You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy across our AI/ML products and services.

Requirements include expertise in TypeScript, Python, AWS, CI/CD, SAST/DAST, and Terraform orchestration; you will diagnose root causes independently and clearly explain the mechanics and significance of vulnerabilities.