Senior Product Security Engineer

Role

Our first product security-focused engineer

Takes high-level direction (e.g., "identify top five security-related gaps for AX") and drives to results

Success looks like a LanceDB platform that follows security-related best practices, and an ongoing partnership with other engineers to continuously enhance our security posture in all areas of the product

Day-to-day

Drive new security-related functionality such as key rotation, user-managed API credentials, RBAC, and the like

Select, deploy and tune security tooling across all relevant repos and environments, ensuring full coverage

Apply relevant industry trends, best practices, and specific vulnerabilities to our product

Qualifications

8+ years as a software engineer, with a significant portion of that time working on appsec-related work

Experience working on large-scale data platforms (e.g., databases, data infra, ML/AI systems), including work on concurrency and multitenancy

Ideally have experience working code in Rust and/or C++. Other languages experience are also OK as long as you can come up to speed on Rust quickly.

Experience building encryption, authentication, and/or authorization features for shipping products at high throughput

Previous experience working at an early-stage startup

Demonstrated ownership of ambiguous projects with minimal guidance

Strong written and verbal communication (can drive alignment across teams)

Comfortable using data (metrics, experiments, usage) to guide decisions

Experience contributing to or working with open source communities

Please apply for this role only if you meet all of the above qualifications, and agree with the day-to-day responsibilities. Of particular note: qualified candidates for this role will have day-to-day coding responsibilities - this is an appsec and devsecops role, not an infosec or platform security role.

About LanceDB

LanceDB is a developer-friendly, open-source data platform for multimodal AI. From hyper-scalable vector search to advanced retrieval for RAG, from streaming training data to interactive exploration of large-scale datasets, LanceDB is the best foundation for your AI workloads.