Senior Product Security Engineer
Posted Updated
Description
You will own and operate a scalable secure software development lifecycle. You will partner with engineering on security features and secure design, review existing systems and new initiatives, manage vulnerabilities through resolution, operate composition analysis, secret scanning, and SAST, and mentor engineers on secure development practices.
Responsibilities
- Own and operate a scalable secure software development lifecycle
- Partner with engineering on security features and secure-by-design architecture
- Review the security of existing systems and new initiatives
- Manage vulnerabilities, posture reporting, and resolution against defined SLAs
- Operate software composition analysis, secret scanning, and SAST across product repositories
- Mentor engineers and improve secure-development practices
Requirements
- 8+ years of product or application security experience
- Experience owning a secure software development lifecycle at scale, including threat modeling and secure design review
- Hands-on experience partnering with engineering on security features and architecture
- Experience with software composition analysis, secret scanning, SAST, or secure-development tooling
- Understanding of software supply chain security and SBOM approaches
- Experience triaging vulnerabilities with CVSS and business context and driving resolution with engineering
Benefits
- Stock options
- Healthcare plans with premiums covered by Anyscale at 99%
- 401k retirement plan
- Wellness and education stipend
- Paid parental leave
- Fertility benefits
- Paid time off
- Commute reimbursement
- 100% coverage of in-office meals
- Mental health support