2 months ago
Base Salary
$238k - $297k/yr
Responsibilities
- Build and maintain software tooling to secure products and the modern AI/ML software ecosystem.
- Conduct in-depth code reviews and remediate security vulnerabilities.
- Evaluate product security through RFC and service reviews.
- Implement and maintain security-focused CI/CD pipelines.
- Perform SAST and DAST assessments to identify vulnerabilities in production code.
- Use Terraform orchestration for secure and efficient infrastructure management.
- Guide engineering teams in developing robust security- and privacy-focused solutions.
- Explain vulnerability mechanics, exploitability, and potential impact to stakeholders.
- Influence security strategy and drive continuous improvement.
- Independently drive multi-month security initiatives from problem definition through execution.
Requirements
- Proven experience as a Security Engineer focused on product security.
- Proficiency in Node.js, TypeScript, Python, and/or Kubernetes.
- Strong understanding of modern JavaScript application design.
- Production experience operating and securing AWS infrastructure at scale.
- Hands-on experience with SAST and DAST tools and methodologies.
- Familiarity with Terraform orchestration for infrastructure management.
- Ability to structure complex problems, diagnose root causes independently, and provide actionable insights.
- Excellent communication skills for presenting technical concepts to technical and non-technical stakeholders.
- Ability to influence security strategies and drive improvements within a team.
- Relevant security certifications such as CISSP, CEH, or OSCP are a plus.
Benefits
- Comprehensive health, dental, and vision coverage.
- Retirement benefits.
- Learning and development stipend.
- Generous paid time off.
- Potential commuter stipend.
- Full-time position located in San Francisco, New York, or Seattle; refer to the posting subtitle for the applicable location.
Categories
About Scale AI
Scale AI builds data annotation services and AI development tools for enterprises and government agencies, sold as a platform and managed services. Its products include the Scale Generative AI Platform for building and evaluating agents and the Data Engine for collecting, curating, and labeling training data, including RLHF and model evaluation. Founded in 2016 and headquartered in San Francisco, the company is privately held and works across domains from computer vision to LLM applications.