Senior Product Security Engineer
Anyscale · Posted Oct 27
Distributed computing platform and managed cloud services for scaling artificial intelligence and machine learning workloads
Get a personal compatibility score
Add a resume for personal matches
About the role
Anyscale is commercializing Ray, an open-source distributed computing framework that powers scalable machine learning workloads at companies like OpenAI, Uber, Spotify, and Instacart. The company is building the best place to run Ray so developers can scale ML applications from laptop to cluster. The Senior Product Security Engineer will own the secure software development lifecycle, partner with engineering on secure-by-design architecture, and own vulnerability management, reporting to the Head of Security from India.
What you will do
- Own and operate a scalable secure software development lifecycle: threat modeling, security requirements, secure design practices, and scanning that engineering can readily adopt.
- Define how our SSDL works when AI writes and ships code: guardrails, review, and scanning for coding agents, MCP integrations, and LLM-powered features.
- Partner with engineering on security features and secure-by-design architecture, from early design through implementation.
- Extend product security down to the platform it runs on: cloud IAM and service roles, Kubernetes and container security, and service-to-service trust on the path to customer data.
- Review the security of existing systems and new initiatives, and turn findings into prioritized, actionable work.
- Own vulnerability management for what we ship: enumerate components, map known vulnerabilities, and produce accurate posture reporting on demand.
- Drive vulnerabilities to resolution with engineering against defined SLAs.
- Own software composition analysis, secret scanning, and SAST across product repositories, and set the bar for secure-development checks.
- Mentor other engineers and raise the security bar across the organization.
Skills used in this role
What the employer is looking for
- 8+ years in product or application security, with senior-level depth, ideally at a high-growth startup.
- Demonstrated ownership of a secure software development lifecycle at scale, including threat modeling and secure design review.
- A strong hands-on background partnering with engineering on security features and architecture, not just reporting findings.
- Hands-on cloud and Kubernetes security depth: cloud IAM and least privilege, container image security including scanning, signing, and SBOM generation, and secure service-to-service and cross-cloud trust. You’ve designed these, not just assessed them.
- Hands-on experience securing LLM features or agentic workflows, and a clear point of view on how secure development changes when agents are part of the team.
- Deep experience with software composition analysis, secret scanning, and SAST or secure-development tooling in real repositories.
- A solid understanding of software supply chain security and how to enumerate what an organization ships, including SBOM approaches.
- Experience triaging vulnerabilities using CVSS and business context and driving them to resolution with engineering.
- The communication and seniority to set direction, review others’ work, and raise the bar for those around you.
Preferred qualifications
- Experience producing vulnerability or security posture reporting for enterprise or regulated customers.
- Experience building or maturing an SSDL program at scale.
- Background in securing AI or ML platforms or distributed systems.
Benefits and support
- Competitive salary and equity
- health/dental/vision coverage (many plans up to 99% employer-covered)
- flexible time off
- paid parental leave
- mental health support
About Anyscale
Anyscale is the company behind Ray, an open-source distributed computing framework designed to scale artificial intelligence and machine learning workloads seamlessly from a laptop to the cloud. Its managed platform offers elastic GPU orchestration, distributed training, and batch inference capabilities to help development teams build production-grade AI applications without infrastructure complexities.
- Industry
- Artificial Intelligence
- Company size
- 200-500 employees
- Founded
- 2019
- Location
- San Francisco, California, USA
- Funding stage
- Series C
Funding
Series C · $281M raised
- 2021-10-15Series C$199M
- 2020-10-21Series B$40M
- 2019-08-02Series A$20M
- 2019-02-18Seed$22M
Leadership
Chief Executive Officer
Co-founder & Chief Strategy Officer
Co-founder & CTO
Co-founder & Executive Chairman
Recent coverage
Anyscale
Nscale Acquires Anyscale, Enhancing its Full Stack AI Cloud Platform2026-07-30
Anyscale
Anyscale Launches on Microsoft Azure as a Native Integration for Enterprises to Build Sovereign AI2026-06-02
Anyscale
Anyscale Names Christian Stano as Field CTO as the Global Adoption of Ray Accelerates2026-03-19
Anyscale
Anyscale Cuts Multimodal AI Data Processing Costs by 80% with NVIDIA RTX PRO 4500 Blackwell2026-03-16