Senior Product Security Engineer
Anyscale is an AI compute platform built by Ray’s creators for distributed data processing, model training, inference, and related production AI workloads.
About Anyscale
Anyscale provides a managed, multi-cloud platform for building, running, and governing distributed AI workloads with Ray, including data processing, training, and model serving.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own and operate a scalable secure software development lifecycle, including threat modeling, security requirements, secure design, and security scanning. You will partner with engineering to build secure features and architectures, review systems and initiatives, manage product vulnerabilities, and drive remediation. You will establish security practices for AI coding agents, MCP integrations, LLM-powered features, cloud IAM, Kubernetes, containers, software supply chains, and service-to-service trust. You will also mentor engineers and improve secure-development standards across product repositories.
Requirements
- 8+ years of product or application security experience
- Experience owning a secure software development lifecycle at scale
- Threat modeling and secure design review experience
- Hands-on experience partnering with engineering on security features and architecture
- Cloud IAM and least-privilege security expertise
- Kubernetes and container image security expertise, including scanning, signing, and SBOM generation
- Experience securing LLM features or agentic workflows
- Experience with software composition analysis, secret scanning, and SAST
- Knowledge of software supply chain security and SBOM approaches
- Experience triaging vulnerabilities using CVSS and business context
- Experience driving vulnerability remediation with engineering
Responsibilities
- Own and operate a scalable secure software development lifecycle
- Define guardrails, review, and scanning for AI coding agents, MCP integrations, and LLM-powered features
- Partner with engineering on security features and secure-by-design architecture
- Extend product security to cloud IAM, Kubernetes, container security, and service-to-service trust
- Review existing systems and new initiatives and prioritize actionable security findings
- Own vulnerability management and produce accurate security posture reporting
- Drive vulnerability remediation with engineering against defined SLAs
- Own software composition analysis, secret scanning, and SAST across product repositories
- Mentor engineers and raise the organization’s security standards
Benefits
- Stock options
- Healthcare plans with 99% of premiums covered by Anyscale
- 401k retirement plan
- Wellness and education stipend
- Paid parental leave
- Fertility benefits
- Paid time off
- Commute reimbursement
- 100% coverage of in-office meals
- Mental health support
