Senior Product Security Engineer

The role

You will own and operate a scalable secure software development lifecycle and partner with engineering on security features and secure design. You will also manage vulnerabilities and extend product security to the platform.

What you will do

• Own and operate a scalable secure software development lifecycle
• Define how SSDL works when AI writes and ships code
• Partner with engineering on security features and secure-by-design architecture
• Extend product security to cloud IAM, Kubernetes, and container security
• Review the security of existing systems and new initiatives
• Own vulnerability management for shipped products
• Drive vulnerabilities to resolution with engineering against defined SLAs
• Own software composition analysis, secret scanning, and SAST
• Mentor other engineers and raise the security bar

Required qualifications

• 8+ years in product or application security
• Demonstrated ownership of a secure software development lifecycle at scale
• Strong hands-on background partnering with engineering on security features and architecture
• Hands-on cloud and Kubernetes security depth
• Hands-on experience securing LLM features or agentic workflows
• Deep experience with software composition analysis, secret scanning, and SAST
• Solid understanding of software supply chain security and SBOM approaches
• Experience triaging vulnerabilities using CVSS and business context

Nice to have

• Experience producing vulnerability or security posture reporting for enterprise or regulated customers
• Experience building or maturing an SSDL program at scale
• Background in securing AI or ML platforms or distributed systems

Benefits

• Competitive salary and equity
• Health/dental/vision coverage
• Flexible time off
• Paid parental leave
• Mental health support

About the company

Anyscale is commercializing Ray, an open-source project for scalable machine learning. The company is backed by Andreessen Horowitz, NEA, and Addition with $250+ million raised to date.