Senior Product Security Engineer

Skills

About the Role

You will operate a scalable secure software development lifecycle, partner with engineers on secure design and security features, review systems and initiatives, and manage vulnerabilities through resolution. You will also own software composition analysis, secret scanning, SAST, security reporting, and mentoring.

Requirements

• 8+ years of product or application security experience.
• Experience owning a secure software development lifecycle at scale.
• Experience with threat modeling and secure design review.
• Experience partnering with engineering on security features and architecture.
• Experience with software composition analysis, secret scanning, and SAST.
• Knowledge of software supply chain security and SBOM approaches.
• Experience triaging vulnerabilities with CVSS and business context.

Responsibilities

• Operate a scalable secure software development lifecycle.
• Conduct threat modeling, define security requirements, and establish secure design practices.
• Partner with engineering on security features and secure-by-design architecture.
• Review existing systems and new initiatives and prioritize security findings.
• Manage product vulnerabilities and produce security posture reporting.
• Drive vulnerabilities to resolution against defined SLAs.
• Own software composition analysis, secret scanning, and SAST across product repositories.
• Mentor engineers and raise the organization’s security bar.

Benefits

• Stock options
• Healthcare plans with 99% of premiums covered by Anyscale
• 401k Retirement Plan
• Wellness & Education Stipend
• Paid Parental Leave
• Fertility Benefits
• Paid Time Off
• Commute reimbursement
• In-office meals covered