Staff Security Engineer, Product & Platform Security
Nscale is a London-based, full-stack AI cloud and infrastructure company that provides GPU compute, managed AI services, orchestration software, data centers, and power infrastructure for AI training, fine-tuning, and inference.
Funding history
About Nscale
Nscale builds and operates vertically integrated AI infrastructure spanning software, GPU compute, networking, storage, purpose-built data centers, and power. Its active cloud platform offers self-service inference endpoints, fine-tuning, managed Kubernetes and Slurm, virtual machines, and GPU clusters.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will lead product and platform security initiatives across services, cloud platforms, GPU clusters, and critical infrastructure. You will perform security reviews and threat models, validate and prioritise vulnerabilities, coordinate remediation, support incident workflows, and measure security improvements across the product lifecycle.
Requirements
- 10+ years of information-security experience with substantial hands-on experience in product security, application security, platform security, or vulnerability management
- Background in product security, application security, and penetration testing
- Expertise in threat modeling, security architecture, vulnerability assessment, and secure coding
- Experience embedding security throughout the development lifecycle with software, platform, and infrastructure engineering teams
- Knowledge of CVSS scoring, vulnerability prioritization, and risk quantification
- Experience with responsible disclosure frameworks, bug bounty programs, and multi-stakeholder remediation
- Experience with GPU, HPC, or cloud infrastructure security, including AWS, GCP, or Azure
- Knowledge of Kubernetes, container security, APIs, identity and access management, and hybrid-cloud architectures
Responsibilities
- Perform vulnerability assessments, application-security reviews, and testing of core services, APIs, and consoles
- Conduct threat modeling and architecture reviews for products, features, services, and platform changes
- Provide guidance on secure design, coding, authentication, authorization, data protection, and infrastructure security
- Develop reusable security standards, patterns, and guardrails
- Receive, analyse, validate, and prioritise vulnerability findings using CVSS and business impact
- Coordinate reproduction, validation, remediation roadmaps, and resolution tracking with engineering stakeholders
- Identify recurring vulnerability patterns, systemic risks, and technical debt
- Support incident classification, escalation, responsible disclosure, root-cause analysis, and process improvement
- Document findings, remediation steps, lessons learned, and records for audit and compliance
- Track security KPIs, analyse vulnerability trends, report risks, and recommend program improvements
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Flexible paid time off
- Parental leave
- Retirement plan participation