Senior Product Security Engineer

Role

- Our first product security-focused engineer

- Takes high-level direction (e.g., "identify top five security-related gaps for AX") and drives to results

- Success looks like a LanceDB platform that follows security-related best practices, and an ongoing partnership with other engineers to continuously enhance our security posture in all areas of the product

Day-to-day

- Drive new security-related functionality such as key rotation, user-managed API credentials, RBAC, and the like

- Select, deploy and tune security tooling across all relevant repos and environments, ensuring full coverage

- Apply relevant industry trends, best practices, and specific vulnerabilities to our product

Qualifications

- 8+ years as a software engineer, with a significant portion of that time working on appsec-related work

- Experience working on large-scale data platforms (e.g., databases, data infra, ML/AI systems), including work on concurrency and multitenancy

- Demonstrated ability to code in Rust and/or C++

- Experience building encryption, authentication, and/or authorization features for shipping products at high throughput

- Previous experience working at an early-stage startup

- Demonstrated ownership of ambiguous projects with minimal guidance

- Strong written and verbal communication (can drive alignment across teams)

- Comfortable using data (metrics, experiments, usage) to guide decisions

- Experience contributing to or working with open source communities

Please apply for this role only if you meet all of the above qualifications, and agree with the day-to-day responsibilities. Of particular note: qualified candidates for this role will have day-to-day coding responsibilities - this is an appsec and devsecops role, not an infosec or platform security role.

 

About LanceDB

LanceDB is a developer-friendly, open-source data platform for multimodal AI. From hyper-scalable vector search to advanced retrieval for RAG, from streaming ...