8 hours ago
Bengaluru, IndiaSenior
Base Salary
$100k - $100k/yr
Responsibilities
- Own and operate a scalable secure software development lifecycle covering threat modeling, security requirements, secure design, and security scanning.
- Define secure-development guardrails, review processes, and scanning for AI coding agents, MCP integrations, and LLM-powered features.
- Partner with engineering on secure-by-design architecture and security features from initial design through implementation.
- Extend product security to cloud IAM, service roles, Kubernetes, container security, and service-to-service and cross-cloud trust.
- Review existing systems and new initiatives, prioritize findings, and drive vulnerabilities to resolution against defined SLAs.
- Own vulnerability management, component enumeration, posture reporting, software composition analysis, secret scanning, and SAST across product repositories.
- Mentor engineers and raise the organization’s security standards.
Requirements
- 8+ years of product or application security experience, ideally in a high-growth startup.
- Demonstrated ownership of a secure software development lifecycle at scale, including threat modeling and secure design review.
- Hands-on experience partnering with engineering on security features and architecture rather than only reporting findings.
- Hands-on cloud and Kubernetes security experience, including IAM, least privilege, container image scanning and signing, SBOM generation, and service-to-service and cross-cloud trust.
- Hands-on experience securing LLM features or agentic workflows and understanding how development practices change when agents are involved.
- Deep experience with software composition analysis, secret scanning, SAST, or secure-development tooling in production repositories.
- Understanding of software supply chain security and methods for enumerating shipped components, including SBOM approaches.
- Experience triaging vulnerabilities using CVSS and business context and driving remediation with engineering.
- Communication and seniority to set direction, review others’ work, and raise the security bar.
- Preferred: experience with enterprise or regulated-customer vulnerability and security-posture reporting, maturing SSDL programs, or securing AI/ML platforms or distributed systems.
Benefits
- Competitive salary and equity, plus health, dental, and vision coverage with many plans up to 99% employer-covered.
- Flexible time off, paid parental leave, and mental health support.
- The role is based in India.
Tech Stack
Categories
About Anyscale
Anyscale builds a cloud platform and tools to run Ray, the open-source framework for distributed Python and AI/ML workloads, enabling teams to scale data prep, training, and inference. It monetizes through a managed service, enterprise features, and support for Ray deployments. Founded in 2019 and headquartered in San Francisco, this privately held company is the commercial steward of Ray, widely used to power production AI systems.