LanceDB logo

Senior Product Security Engineer

LanceDB

ORRemoteFull-time$180–250K/yrPosted 2mo agoVerified open 6 days ago

Most applications go out cold — see where you stand first. No sign-up to start.

At a glance

Compensation
$180–250K/yr
Location
ORRemote
Schedule
Full-time
Work Authorization
Not specified

Job overview

LanceDB is hiring a Senior Product Security Engineer. LanceDB seeks its first product security‑focused engineer to drive security‑related functionality, select and tune tooling, and apply industry trends and best practices, partnering with engineers to continuously improve the platform’s security posture.

Key focus areas include Drive new security‑related functionality such as key rotation, user‑managed API credentials, and RBAC, Select, deploy, and tune security tooling across all repos and environments for full coverage, and Apply relevant industry trends, best practices, and specific vulnerabilities to the product.

Successful candidates bring 8+ Years As A Software Engineer, Significant Appsec-Related Work, and Experience Working On Large-Scale Data Platforms. Important skills include Key Rotation, User-Managed API Credentials, RBAC, Security Tooling Deployment, Security Tooling Tuning, and Industry Trends Application.

Skills & qualifications

RequiredNice to have

Skills

Key RotationUser-Managed API CredentialsRBACSecurity Tooling DeploymentSecurity Tooling TuningIndustry Trends ApplicationBest Practices ApplicationVulnerabilities ApplicationRustC++CryptographyAuthenticationAuthorizationOwnership of Ambiguous ProjectsCommunicationData-Guided DecisionsOpen Source CommunitiesApplication SecurityDevsecopsApplying Industry TrendsApplying Best PracticesApplying Specific VulnerabilitiesDriving AlignmentUsing Data to Guide Decisions

Qualifications

8+ Years as a Software EngineerSignificant Appsec-Related WorkExperience Working on Large-Scale Data PlatformsWork on ConcurrencyWork on MultitenancyExperience Building Features for Shipping Products at High ThroughputPrevious Experience Working at an Early-Stage StartupDemonstrated Ownership of Ambiguous Projects With Minimal GuidanceExperience Contributing to Open Source CommunitiesExperience Working With Open Source CommunitiesDay-to-Day Coding Responsibilities

Full job description

Role

  • Our first product security-focused engineer

  • Takes high-level direction (e.g., "identify top five security-related gaps for AX") and drives to results

  • Success looks like a LanceDB platform that follows security-related best practices, and an ongoing partnership with other engineers to continuously enhance our security posture in all areas of the product

Day-to-day

  • Drive new security-related functionality such as key rotation, user-managed API credentials, RBAC, and the like

  • Select, deploy and tune security tooling across all relevant repos and environments, ensuring full coverage

  • Apply relevant industry trends, best practices, and specific vulnerabilities to our product

Qualifications

  • 8+ years as a software engineer, with a significant portion of that time working on appsec-related work

  • Experience working on large-scale data platforms (e.g., databases, data infra, ML/AI systems), including work on concurrency and multitenancy

  • Demonstrated ability to code in Rust and/or C++

  • Experience building encryption, authentication, and/or authorization features for shipping products at high throughput

  • Previous experience working at an early-stage startup

  • Demonstrated ownership of ambiguous projects with minimal guidance

  • Strong written and verbal communication (can drive alignment across teams)

  • Comfortable using data (metrics, experiments, usage) to guide decisions

  • Experience contributing to or working with open source communities

Please apply for this role only if you meet all of the above qualifications, and agree with the day-to-day responsibilities. Of particular note: qualified candidates for this role will have day-to-day coding responsibilities - this is an appsec and devsecops role, not an infosec or platform security role.

 

About LanceDB

LanceDB is a developer-friendly, open-source data platform for multimodal AI. From hyper-scalable vector search to advanced retrieval for RAG, from streaming training data to interactive exploration of large-scale datasets, LanceDB is the best foundation for your AI workloads.

You've read the whole posting — now see how you match it.