6 hours ago
Bengaluru, IndiaSenior
Base Salary
$100k - $100k/yr
Responsibilities
- Own and operate a scalable secure software development lifecycle, including threat modeling, security requirements, secure design practices, and scanning.
- Partner with engineering on security features and secure-by-design architecture from early design through implementation.
- Review the security of existing systems and new initiatives and convert findings into prioritized, actionable work.
- Own vulnerability management by enumerating shipped components, mapping known vulnerabilities, and producing accurate posture reporting.
- Drive vulnerabilities to resolution with engineering against defined SLAs.
- Own software composition analysis, secret scanning, and SAST across product repositories.
- Mentor engineers and raise the organization’s security standards.
Requirements
- 8+ years of experience in product or application security.
- Demonstrated ownership of a secure software development lifecycle at scale, including threat modeling and secure design review.
- Strong hands-on experience partnering with engineering on security features and architecture.
- Deep experience with software composition analysis, secret scanning, SAST, or secure-development tooling in real repositories.
- Understanding of software supply chain security, component enumeration, and SBOM approaches.
- Experience triaging vulnerabilities using CVSS and business context and driving remediation with engineering.
- Ability to set direction, review others’ work, and raise the security bar across the organization.
- Experience producing vulnerability or security posture reporting for enterprise or regulated customers is preferred.
- Familiarity with container artifact security, image scanning, signing, and SBOM generation is preferred.
- Experience building or maturing an SSDL program at scale and background in AI or ML platforms or distributed systems are preferred.
Benefits
- Competitive salary and equity.
- Health, dental, and vision coverage, with many plans up to 99% employer-covered.
- Flexible time off, paid parental leave, and mental health support.
- The role is based in India.
About Anyscale
Anyscale builds a cloud platform and tools to run Ray, the open-source framework for distributed Python and AI/ML workloads, enabling teams to scale data prep, training, and inference. It monetizes through a managed service, enterprise features, and support for Ray deployments. Founded in 2019 and headquartered in San Francisco, this privately held company is the commercial steward of Ray, widely used to power production AI systems.