5 hours ago
Base Salary
$180k - $210k/yr
Responsibilities
- Own and operate a scalable secure software development lifecycle covering threat modeling, security requirements, secure design practices, and scanning.
- Partner with engineering on security features and secure-by-design architecture from initial design through implementation.
- Review existing systems and new initiatives and convert findings into prioritized, actionable work.
- Own vulnerability management, including component enumeration, known-vulnerability mapping, and on-demand posture reporting.
- Drive vulnerabilities to resolution with engineering against defined SLAs.
- Own software composition analysis, secret scanning, and SAST across product repositories.
- Mentor engineers and raise the organization’s security standards.
Requirements
- 8+ years of experience in product or application security, ideally in a high-growth startup.
- Demonstrated ownership of a secure software development lifecycle at scale, including threat modeling and secure design review.
- Strong hands-on experience partnering with engineering on security features and architecture.
- Deep experience with software composition analysis, secret scanning, SAST, or secure-development tooling in real repositories.
- Understanding of software supply chain security, organizational software inventory, and SBOM approaches.
- Experience triaging vulnerabilities with CVSS and business context and driving remediation with engineering.
- Ability to set direction, review work, and mentor others.
- Preferred experience producing vulnerability or security posture reporting for enterprise or regulated customers.
- Preferred familiarity with container artifact security, image scanning, signing, and SBOM generation.
- Experience building or maturing an SSDL program at scale is preferred.
- Background in AI or ML platforms or distributed systems is preferred.
Benefits
- The role is based in India.
Categories
About Anyscale
Anyscale enables Python developers to build and run all their AI—from data prep to training and inference—at any scale. Anyscale is trusted by leading AI teams at Canva, TripAdvisor, Physical Intelligence, Coinbase and more.