SlipstreamJobsFresh Startup & VC-Backed Jobs

Security Engineer, Product Security

Scale - San Francisco, CA, United States - Hybrid - posted 2025-12-22

Apply on the company site

SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.

Salary: USD 237,600 - 297,000 / annual

Scale is seeking a highly technical Security Engineer to join the Product Security team, responsible for ensuring the security and integrity of AI/ML products and services. This role focuses on building and maintaining software tooling that secures every layer of the modern AI/ML software ecosystem. Key responsibilities include conducting in-depth code reviews to identify and remediate security vulnerabilities, evaluating and enhancing product security through RFC and service reviews, and implementing secure CI/CD pipelines. You will perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify vulnerabilities in production code, utilize Terraform orchestration for secure infrastructure management, and guide engineering teams to build robust solutions that consider security and privacy. You will structure complex problems, diagnose root causes independently, and clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact. The role involves influencing the security strategy and direction of the team, advocating for best practices and continuous improvement. Ideal candidates demonstrate the ability to drive multi-month security initiatives independently from problem definition through execution. Required expertise includes proficiency in NodeJS, TypeScript, Python, and/or Kubernetes, strong understanding of modern JavaScript application design, and production experience operating and securing AWS infrastructure at scale. Hands-on experience with SAST and DAST tools, Terraform orchestration, and relevant security certifications (CISSP, CEH, OSCP) are valued. Excellent communication skills and the ability to present technical concepts to both technical and non-technical stakeholders are essential.

Similar roles