Apply now

Posted 3 months ago

Senior Product Security Engineer

@ LanceDB

Canada

Full-time8+ years experience
Apply now
SIGNALS

Overview

LanceDB is hiring a Senior Product Security Engineer, its first product security-focused engineer, to take high-level direction and drive security improvements across the AI-native multimodal lakehouse platform. The role is a full-time, hands-on appsec and devsecops position with day-to-day coding responsibilities, not infosec or platform security.

Responsibilities:

  • Build key rotation, user-managed API credentials and RBAC
  • Select, deploy and tune security tooling across repos and environments
  • Apply industry best practices and specific vulnerabilities to the product
  • Partner with engineers to continuously enhance security posture

Requirements summary:

  • 8+ years as a software engineer, significant appsec work
  • Large-scale data platform experience, including concurrency and multitenancy
  • Coding in Rust and/or C++
  • Primary engineer on encryption, authentication or authorization features in shipped products
  • Experience at an early-stage startup
  • Open source community experience

Tools & skills

Source and dates

Employer career site / ATS feed · ashby

Employer posting date
2026-08-20
First seen by our source
2026-10-08
Source record updated
2026-10-20

These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.

Job details

SenioritySenior
DepartmentSoftware development
Experience8+ years
Hours per week40 (estimated)
Work settingOffice
PositionMostly sitting
Physical demandsphysical low · computer high
LanguagesEnglish

Summary and details written by AI from the posting; the employer’s posting is the authority.

LanceDB

Saved company profile

Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.

Developer-friendly, open source database for multi-modal AI

Full company description

LanceDB is a developer-friendly, open source database for multimodal AI. From hyper scalable vector search to advanced retrieval for RAG, from streaming training data to interactive exploration of large scale AI datasets, LanceDB is the best foundation for your AI application.

LinkedIn followers
11,585
People associated on LinkedIn
49
Reported office locations
  • San Francisco, California, US
Business categories
  • Information Services
  • Artificial Intelligence (AI)
  • Machine Learning
Other recorded names
  • LanceDB
Profile identifies a recruitment agency
No
Reported total investment
41,000,000

Currency and observation date were not supplied; this is not a current valuation or a funding round.

LanceDB is a developer-friendly, open source database for multimodal AI. From hyper scalable vector search to advanced retrieval for RAG, from streaming training data to interactive exploration of large scale AI datasets, LanceDB is the best foundation for your AI application.

FieldValue
IndustryInformation Services
Company size11-50 employees
HeadquartersSan Francisco, California
Organization typePrivately Held
Year founded2022
Open jobs on Jobsy6
LinkedInView page
Job description

About LanceDB

AI advances at the speed of its research, and research moves at the speed of its data. LanceDB is the AI-native Multimodal Lakehouse: one system where a researcher curates petabytes of video, audio, and every signal derived from them with a few lines of Python, and the next training run starts as fast as the next idea. Customers like Runway, Midjourney, and Netflix build the future of AI on LanceDB, from frontier and world models to robots and autonomous vehicles.

About the Role

  • Our first product security-focused engineer

  • Takes high-level direction (e.g., “identify top five security-related gaps for AX”) and drives to results

  • Success looks like a LanceDB platform that follows security-related best practices, and an ongoing partnership with other engineers to continuously enhance our security posture in all areas of the product

What You’ll Do

  • Drive new security-related functionality such as key rotation, user-managed API credentials, RBAC, and the like

  • Select, deploy and tune security tooling across all relevant repos and environments, ensuring full coverage

  • Apply relevant industry trends, best practices, and specific vulnerabilities to our product

What We’re Looking For

  • 8+ years as a software engineer, with a significant portion of that time working on appsec-related work

  • Experience working on large-scale data platforms (e.g., databases, data infra, ML/AI systems), including work on concurrency and multitenancy

  • Demonstrated ability to code in Rust and/or C++

  • Experience building encryption, authentication, and/or authorization features for shipping products at high throughput. Helping other developers build this functionality does not qualify for this criterion - you should have been the primary engineer working on these features.

  • Previous experience working at an early-stage startup

  • Demonstrated ownership of ambiguous projects with minimal guidance

  • Strong written and verbal communication (can drive alignment across teams)

  • Comfortable using data (metrics, experiments, usage) to guide decisions

  • Experience contributing to or working with open source communities

Please apply for this role only if you meet all of the above qualifications, and agree with the day-to-day responsibilities. Of particular note: qualified candidates for this role will have day-to-day coding responsibilities - this is an appsec and devsecops role, not an infosec or platform security role.

Similar jobs

  • Senior Product Security Engineer

    Remote in Canada
    $153k–$213k/yrRemote

    Affirm: Affirm only uses legitimate company email address domains (either “@affirm.com” or "@us.greenhouse-mail.io”) to communicate with candidates via email.

    Candidates need deep experience in security engineering, security operations, insider risk or digital forensics, plus hands-on work with SIEM detection logic, insider risk tools and Python. Experience with workflow automation platforms and production agentic automations is also required.

    Splunk, Elastic, Panther, Chronicle, Python, Tines

    Product Security Engineer II - IAM

    Remote in Canada
    $133k–$183k/yrRemote

    Affirm: Affirm only uses legitimate company email address domains (either “@affirm.com” or "@us.greenhouse-mail.io”) to communicate with candidates via email.

    2+ YOECandidates need at least two years of software engineering experience, with strong Python or similar backend skills, API and debugging knowledge, and comfort operating production systems. Familiarity with cloud environments, CI/CD, IAM concepts and clear written communication are also expected.

    SailPoint, Auth0, GitHub, Terraform, AWS

  • Product Security Engineer

    Saint-Laurent, QC
    Full Time

    Randstad Canada

    5+ YOECandidates need a bachelor's degree in computer science, software or computer engineering, or a related field, plus at least 5 years in systems cybersecurity. They need strong knowledge of networks, firewalls, intrusion prevention, Windows and Linux, and strong communication and leadership skills.

    Cisco, Netgear, Windows, Linux, firewalls, intrusion prevention systems

  • Senior Product Security Engineer

    Ottawa, ON
    HybridFull Time

    Snyk

    5+ YOECandidates need 5-8 years running or securing cloud infrastructure, with deep hands-on GCP experience and working AWS knowledge. Snyk also requires strong GCP IAM and GKE skills, infrastructure as code experience, and confidence using AI coding agents.

    Terraform, Kubernetes, GKE, Claude Code, Artifact Registry, Binary Authorization

  • Product Security Engineer

    Remote in Canada
    Remote

    Coinbase

    3+ YOECandidates need 3+ years in application security, penetration testing or offensive security, including custom tooling. They must have hands-on LLM experience, red teaming of AI systems, deep knowledge of OWASP Top 10 and SANS Top 25, and production-grade programming in Python, Go or similar.

    LLMs, frontier AI models

  • Product Security Engineer

    Vancouver, BC

    Asana

    5+ YOECandidates need 5+ years in application or product security or security-focused software engineering. They need strong programming skills, knowledge of web vulnerabilities and OWASP Top 10, and experience with security testing tools and threat modeling.

    SAST tools, DAST tools, SCA tools

  • Senior Product Security Engineer

    Remote in Canada
    Remote

    AlphaSense

    5+ YOECandidates need 5 to 7+ years in product, application or cloud security engineering. They need secure SDLC and threat modeling skills, experience securing AI/ML pipelines, and familiarity with encryption, cloud security and OAuth, OIDC, SAML, RBAC and ABAC.

    Kubernetes, CI/CD pipelines

  • Sr Product Security Engineer

    Toronto, ON
    Remote

    BeyondTrust

    4+ YOECandidates need 4+ years in application security, product security, DevSecOps or security engineering, including hands-on work with security tools in CI/CD pipelines. BeyondTrust also expects experience with GitHub-integrated scanning tools, AI-powered code analysis platforms, scripting and policy-as-code.

    GitHub Advanced Security, CodeQL, Dependabot, Wiz CLI, Claude Code Security, Codex Security

Locations & environments

Locations

All of CanadaRemote · Hybrid · On-site · Field

Pro tip: add remote jobs to widen your search.

Exclude locations

Workplace type

Company jobs in these results

These are this company’s jobs loaded in your current search. The company may have more openings.