Senior Product Security Engineer

About the role

Anyscale's product security needs are growing as we ship to larger and more demanding customers. We're looking for a Senior Product Security Engineer to own our secure software development lifecycle and to be engineering's partner on building security into the product.

Responsibilities

• Own and operate a scalable secure software development lifecycle: threat modeling, security requirements, secure design practices, and scanning that engineering can readily adopt.
• Partner with engineering on security features and secure-by-design architecture, from early design through implementation.
• Review the security of existing systems and new initiatives, and turn findings into prioritized, actionable work.
• Own vulnerability management for what we ship: enumerate components, map known vulnerabilities, and produce accurate posture reporting on demand.
• Drive vulnerabilities to resolution with engineering against defined SLAs.
• Own software composition analysis, secret scanning, and SAST across product repositories, and set the bar for secure-development checks.
• Mentor other engineers and raise the security bar across the organization.

Requirements

This is a senior, high-ownership role. Based in India.

Qualifications

• 8+ years in product or application security, with senior-level depth, ideally at a high-growth startup.
• Demonstrated ownership of a secure software development lifecycle at scale, including threat modeling and secure design review.
• A strong hands-on background partnering with engineering on security features and architecture, not just reporting findings.
• Deep experience with software composition analysis, secret scanning, and SAST or secure-development tooling in real repositories.
• A solid understanding of software supply chain security and how to enumerate what an organization ships, including SBOM approaches.
• Experience triaging vulnerabilities using CVSS and business context and driving them to resolution with engineering.
• The communication and seniority to set direction, review others' work, and raise the bar for those around you.

Skills

• Experience producing vulnerability or security posture reporting for enterprise or regulated customers.
• Familiarity with container artifact security, including image scanning, signing, and SBOM generation.
• Experience building or maturing an SSDL program at scale.
• Background in AI or ML platforms or distributed systems.

Benefits

N/A

Pay

N/A

Schedule

N/A

Benefits

N/A