Senior Product Security Engineer

About the role

Takes high-level direction (e.g., "identify top five security-related gaps for AX") and drives to results. Success looks like a LanceDB platform that follows security-related best practices, and an ongoing partnership with other engineers to continuously enhance our security posture in all areas of the product.

Responsibilities

• Drive new security-related functionality such as key rotation, user-managed API credentials, RBAC, and the like
• Select, deploy and tune security tooling across all relevant repos and environments, ensuring full coverage
• Apply relevant industry trends, best practices, and specific vulnerabilities to our product

Qualifications

• 8+ years as a software engineer, with a significant portion of that time working on appsec-related work
• Experience working on large-scale data platforms (e.g., databases, data infra, ML/AI systems), including work on concurrency and multitenancy
• Demonstrated ability to code in Rust and/or C++
• Experience building encryption, authentication, and/or authorization features for shipping products at high throughput
• Previous experience working at an early-stage startup
• Demonstrated ownership of ambiguous projects with minimal guidance
• Strong written and verbal communication (can drive alignment across teams)
• Comfortable using data (metrics, experiments, usage) to guide decisions
• Experience contributing to or working with open source communities