Scale AI
Security Engineer, Infrastructure
At a Glance
About This Role
We are seeking a highly skilled Infrastructure Security Engineer to join our team. This role is integral to ensuring the security and integrity of our platform. You will be responsible for securing large cloud environments, orchestrating and securing various compute clusters, and reviewing infrastructure as code. Your expertise in cloud security, infrastructure automation, and advanced security practices will be essential in maintaining and enhancing our security posture.
You will:
- Secure infrastructure across large cloud hosting providers (e.g., AWS, Azure, GCP).
- Implement and maintain robust security configurations and policies for cloud environments.
- Conduct regular security assessments and audits of infrastructure to identify vulnerabilities and areas for improvement.
- Develop and enforce security best practices for infrastructure automation and orchestration.
- Collaborate with DeveloperExperience, IT, and product teams to integrate security into all stages of the infrastructure lifecycle.
- Review and secure infrastructure as code (e.g., Terraform, CloudFormation).
- Educate and mentor team members on infrastructure security best practices and emerging threats.
Ideally, you’d have:
- Proven experience as a Security Engineer with a focus on product security.
- Proficiency in NodeJS, TypeScript, and Kubernetes.
- Experience with orchestrating and securing GPU clusters.
- Proficiency in infrastructure as code tools such as Terraform and CloudFormation.
- Excellent communication skills, with the ability to clearly explain technical concepts and their implications to both technical and non-technical stakeholders.
- Demonstrated ability to influence security strategies and drive improvements within an organization.
- Relevant security certifications (e.g., AWS Certified Security Specialty, Certified Cloud Security Professional) are a plus.
- Experience in a senior or lead security role is preferred.
Compensation packages at Scale for eligible roles include base salary, equity, and benefits. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position and may be inclusive of several career levels at Scale; it will be determined during the interview process based on work location and additional factors, including job-related skills, experience, qualifications, interview performance, and relevant education or training. Scale employees in eligible roles are also granted equity based compensation, subject to Board of Director approval. Your recruiter can share more about the specific salary range for your preferred location during the hiring process, and confirm whether the hired role will be eligible for equity grant. You'll also receive benefits including, but not limited to: comprehensive health, dental and vision coverage, retirement benefits, a learning and development stipend, and generous PTO. Additionally, this role may be eligible for additional benefits such as a commuter stipend.
PLEASE NOTE: Our policy requires a 90-day waiting period before reconsidering candidates for the same role. This allows us to ensure a fair and thorough evaluation of all applicants.
About Us:
At Scale, our mission is to develop reliable AI systems for the world's most important decisions. Our products provide the high-quality data and full-stack technologies that power the world's leading models, and help enterprises and governments build, deploy, and oversee AI applications that deliver real impact. We work closely with industry leaders like Meta, Ernst& Young, Mayo Clinic, Time Inc., the Government of Qatar, and U.S. government agencies including the Army and Air Force. We are expanding our team to accelerate the development of AI applications.
We believe that everyone should be able to bring their whole selves to work, which is why we are proud to be an inclusive and equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability status, gender identity or Veteran status.
We are committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. If you need assistance and/or a reasonable accommodation in the application or recruiting process due to a disability, please contact us at accommodations@scale.com. Please see the United States Department of Labor's Know Your Rights poster for additional information.
We comply with the United States Department of Labor's Pay Transparency provision.
PLEASE NOTE: We collect, retain and use personal data for our professional business purposes, including notifying you of job opportunities that may be of interest and sharing with our affiliates. We limit the personal data we collect to that which we believe is appropriate and necessary to manage applicants’ needs, provide our services, and comply with applicable laws. Any information we collect in connection with your application will be treated in accordance with our internal policies and programs designed to protect personal data. Please see our privacy policy for additional information.
Source: Scale AI careers · View original posting
About Scale AI
Scale AI is a data infrastructure company that specializes in providing high-quality training data and technologies for AI model development and deployment. Founded in 2016 by Alexandr Wang and Lucy Guo, Scale AI has grown from a data annotation startup into a comprehensive "data foundry"that serves enterprises, governments, and AI labs across various industries. The company offers a range of services, including human-powered data labeling and annotation, Reinforced Learning with Human Feedback (RLHF) technology, and end-to-end machine learning lifecycle management solutions. Scale AI also develops specialized AI agents and provides full-stack data and technology solutions for building and overseeing AI applications. With a focus on delivering correctly labeled datasets, Scale AI aims to enhance the effectiveness of machine learning models. Scale AI has established partnerships with leading organizations such as Meta, Microsoft, and OpenAI, and has achieved significant financial milestones, including projected revenues of $2 billion in 2025 and a valuation exceeding $29 billion.
Security at Scale AI
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Scale AI's AppSec mission is to treat security as foundational, integrating it deeply into their company culture and product development lifecycle, and to protect their customers' data. They conduct in-depth code reviews to identify and remediate security vulnerabilities and guide engineering teams to build robust long-term solutions that consider security and privacy. Their risk philosophy involves providing access to their latest security compliance certifications and reports via their Trust Center, including SOC 2 Type II. They also provide a way to report vulnerabilities. Explicit statements describing AppSec as 'developer-first' or 'gatekeeping', or a public statement of a risk-tolerance threshold or formal risk prioritization framework are not publicly available.”
Security Team
Alex Levinson is the Chief Information Security Officer at Scale AI. He has stated, 'we've started building out our Security Operations team at Scale AI.' The explicit reporting line for AppSec and whether it is centralized or embedded is not publicly available. The team size estimate is also not publicly available. As of, there is 1 active AppSec job posting for a 'Security Engineer, Product Security' and a stale listing for 'Security Engineer, Detection & Incident Response'. Common skill patterns from job postings include 'Proficiency in NodeJS, TypeScript, Python, and/or Kubernetes,' the ability to 'Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST),' and to 'Utilize terraform orchestration.' A consolidated public list showing the entire AppSec team's headcount or org chart is not publicly available.
Key Initiatives
Scale AI has no public evidence of a Security Champions Program. For 'Shift Left' practices, they 'Conduct in-depth code reviews to identify and remediate security vulnerabilities' and 'Implement and maintain CI/CD pipelines with a strong focus on security.' Their vulnerability management process includes an intake method where users can 'Need to report a vulnerability?'. However, explicit public SLAs, MTTR targets, or Jira/ticketing ownership statements related to vulnerability triage and remediation are not publicly available. For Secure SDLC Artifacts, they 'Evaluate and enhance the security of our product offerings, through RFC and service review.' Explicit public statements requiring threat modeling for specific services or describing annual pen test cadence are not publicly available. No explicit, dated public announcements describing new AppSec-specific programs, tool rollouts, or policy changes in the last six months beyond job postings and the company security/trust pages are publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Scale AI's site