Public Sector Product Security Engineer

Scale AI; Washington (District of Columbia); On-site; USD 178,400 - 307,000; Full time

Benefits offered by this job

comprehensive health, dental andvision

retirement benefits

learning and development stipend

generous PTO

commuter stipend

Job summary

Scale AI is seeking a highly technical Product Security Engineer to join the Public Sector Infrastructure & Security team. You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy.

You will apply expertise in TypeScript, Python, Kubernetes, CI/CD, SAST, DAST, and terraform orchestration to identify and mitigate vulnerabilities and to drive secure product development across the organization.

Qualifications

• Security-focused product engineer with code review experience.
• Proficient in modern security testing (SAST/DAST).
• Strong knowledge of Kubernetes and terraform orchestration.

Responsibilities

• Conduct in-depth code reviews to identify and remediate security vulnerabilities.
• Evaluate and enhance the security of our product offerings, through RFC and service review.
• Implement and maintain CI/CD pipelines with a strong focus on security.
• Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify vulnerabilities in production code.
• Utilize terraform orchestration to ensure secure and efficient infrastructure management.
• Guide engineering teams to build robust long‑term solutions that consider security and privacy.
• Clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact.
• Influence the security strategy and direction of the team, advocating for best practices and continuous improvement.

Skills

TypeScript

Python

Kubernetes

CI/CD

SAST

DAST

Terraform

Tools

NodeJS

Job description

Scale AI is seeking a highly technical Product Security Engineer to join the Public Sector Infrastructure & Security team. You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy.

You will apply expertise in TypeScript, Python, Kubernetes, CI/CD, SAST, DAST, and terraform orchestration to identify and mitigate vulnerabilities and to drive secure product development across the organization.