Product Security Engineer

{
  "content_hash": "d4bbfc6a0d8fe7759ccf7029178fe247f342e088f5e4a4479c84e4867c5631ae",
  "source_hash": "3f760e782a4afa4163a48c82178f3756de9cac80072ae8a7dc1920fe0471da84",
  "last_changed_at": "2026-05-30T05:48:32.762Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": null,
    "city": null,
    "region": null,
    "country": null,
    "is_remote": true,
    "confidence": null
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T20:14:38.285Z",
  "launch_scope": {
    "reason": "jazzhr_production_catalog",
    "included": true,
    "location": {
      "raw": null,
      "city": null,
      "region": null,
      "country": null,
      "is_remote": true,
      "confidence": null
    },
    "countries": []
  },
  "remote_policy": "remote",
  "salary_period": null,
  "workplace_type": "remote",
  "salary_currency": null
}

{}

{
  "detail": {
    "url": "https://h2oai.applytojob.com/apply/jobs/details/y8ULFS3c6a?&",
    "heading": "Product Security Engineer",
    "html_title": "JazzHR » Job Listings",
    "canonical_url": "https://h2oai.applytojob.com/apply/y8ULFS3c6a/Product-Security-Engineer",
    "description_html": "<div class=\"job_description\">\n\t\t\t\t\t<p style=\"line-height:1.2;margin-right:6px;text-align:justify;background-color:#ffffff;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"background-color:#ffffff;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Founded in 2012, H2O.ai is on a mission to democratize AI. As the world&#8217;s leading agentic AI company, H2O.ai converges Generative and Predictive AI to help enterprises and public sector agencies develop purpose-built GenAI applications on their private data. With a focus on Sovereign AI&#8212;secure, compliant, and infrastructure-flexible deployments&#8212;H2O.ai delivers solutions that align with the highest standards of data privacy and control.</span></span></span></span></span></span></span></span></p><p style=\"line-height:1.2;margin-right:6px;text-align:justify;background-color:#ffffff;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"background-color:#ffffff;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Our open-source technology is trusted by over 20,000 organizations worldwide, including more than half of the Fortune 500. H2O.ai powers AI transformation for companies like AT&amp;T, Commonwealth Bank of Australia, Chipotle, Workday, Progressive Insurance, and NIH.</span></span></span></span></span></span></span></span></p><p style=\"line-height:1.2;margin-right:6px;text-align:justify;background-color:#ffffff;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"background-color:#ffffff;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">H2O.ai partners include NVIDIA, Dell Technologies, Deloitte, Ernst &amp; Young (EY), Snowflake, AWS, Google Cloud Platform (GCP), VAST Data and MinIO. H2O.ai&#8217;s AI for Good program supports nonprofit groups, foundations, and communities in advancing education, healthcare, and environmental conservation. With a vibrant community of 2 million data scientists worldwide, H2O.ai aims to co-create valuable AI applications for all users.</span></span></span></span></span></span><br><br><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"background-color:#ffffff;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">H2O.ai has raised 256 million from investors, including Commonwealth Bank, NVIDIA, Goldman Sachs, Wells Fargo, Capital One, Nexus Ventures and New York Life.</span></span></span></span></span></span></span></span><br>&#160;</p><p style=\"line-height:1.2;text-align:justify;background-color:#ffffff;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:700;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">About This Opportunity</span></span></span></span></span></span></span><br>&#160;</p><p style=\"line-height:1.2;text-align:justify;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">H2O.ai is seeking a Product Security Engineer to join our Cloud Platform team and help scale our vulnerability management and security compliance operations. As H2O.ai serves highly regulated enterprises including major financial institutions and government agencies, maintaining robust security posture across our cloud platform is critical to customer success.</span></span></span></span></span></span></span></p><p style=\"line-height:1.2;text-align:justify;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">You'll operationalize security practices across our containerized platform, manage vulnerability assessments for customer deployments, and ensure compliance with frameworks like FedRAMP, SOC2, and banking regulatory requirements. This role combines security engineering, cross-functional coordination, and customer-facing technical work to enable secure AI deployments at scale.</span></span></span></span></span></span></span></p><p style=\"line-height:1.2;text-align:justify;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">This is an opportunity to build expertise in enterprise security operations while working with cutting-edge cloud-native technologies and making a direct impact on how Fortune 500 companies and government agencies deploy AI securely.</span></span></span></span></span></span></span></p><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">This position is based in Sri Lanka.</span></span></span></span></span></span></span><p style=\"line-height:1.2;text-align:justify;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:700;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">What You Will Do</span></span></span></span></span></span></span></p><ul><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Analyze and triage vulnerability scan results from various security tools, investigating findings to understand actual risk and exploitability in context</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Work directly with engineering teams to understand remediation options, evaluate fix approaches, and coordinate timely resolution of security issues</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Route vulnerabilities to component owners and actively track remediation progress, following up to ensure completion within required timeframes</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Support FedRAMP continuous monitoring processes, including monthly POA&amp;M management and compliance reporting</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Engage with customer security teams to address vulnerability findings, reconcile scan results, and support deployment approvals</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Maintain and extend our vulnerability management tooling and automation infrastructure</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Assess risk levels and communicate security findings to technical and non-technical stakeholders</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Support container image security controls and Kubernetes security policies across customer environments</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Contribute to security documentation, runbooks, and compliance artifacts for customer audits</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Participate in security incident response and customer escalations as needed</span></span></span></span></span></span></span></li></ul><p style=\"line-height:1.2;text-align:justify;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:700;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">What We Are Looking For</span></span></span></span></span></span></span></p><ul><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">2-4 years of experience in application security, product security, or DevSecOps roles</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Strong understanding of container security, vulnerability management, and CVE assessment</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Ability to analyze vulnerability findings deeply - understanding exploit paths, affected components, and contextual risk</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Hands-on experience with security scanning tools</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Familiarity with Kubernetes security concepts and best practices</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Experience with compliance frameworks (FedRAMP, SOC2, ISO 27001, or banking regulations) preferred</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Scripting and automation skills (Python, Bash, &amp; Go) to maintain security tooling</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Excellent written and verbal communication skills for cross-functional coordination with engineering teams</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Strong follow-through and ability to drive remediation efforts across multiple teams</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Detail-oriented mindset with ability to manage multiple priorities and deadlines</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Customer-focused approach with ability to translate technical security findings into business context</span></span></span></span></span></span></span></li><li style=\"list-style-type:disc;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Self-motivated and able to work effectively in a remote-first environment</span></span></span></span></span></span></span></li></ul><p><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><strong>Why H2O.ai?</strong></span></span></p><ul><li><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\">Market leader in total rewards</span></span></li><li><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\">Remote-friendly culture</span></span></li><li><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\">Flexible working environment</span></span></li><li><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\">Be part of a world-class team</span></span></li><li><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\">Career growth</span></span></li></ul><p style=\"line-height:1.2;text-align:justify;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Sounds exciting? Let&#8217;s talk! We&#8217;re looking for smart, curious engineers who are ready to take on the challenge! Apply now and help us shape the future of enterprise AI software. </span></span></span></span></span></span></span></p><p style=\"line-height:1.2;text-align:justify;margin-bottom:27px;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">H2O.ai is committed to creating a diverse and inclusive culture. All qualified applicants will receive consideration for employment without regard to their race, ethnicity, religion, gender, sexual orientation, age, disability status or any other legally protected basis.</span></span></span></span></span></span></span></p><p style=\"line-height:1.2;text-align:justify;margin-bottom:27px;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">H2O.ai is an innovative AI cloud platform company, leading the mission to democratize AI for everyone. Thousands of organizations from all over the world have used our cutting-edge technology across a variety of industries. We&#8217;ve made it easy for people at all levels to generate breakthrough solutions to complex business problems and advance the discovery of new ideas and revenue streams.&#160;We push the boundaries of what is possible with artificial intelligence.&#160;</span></span></span></span></span></span></span></p><p style=\"line-height:1.2;text-align:justify;margin-top:19px;\"><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">H2O.ai employs the world&#8217;s top Kaggle Grandmasters, the community of best-in-the-world machine learning practitioners and data scientists. A strong AI for Good ethos and responsible AI drive the company&#8217;s purpose.</span></span></span></span></span></span></span></p><span style=\"font-size:14px;\"><span style=\"font-family:Arial, Helvetica, sans-serif;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">Please visit</span></span></span></span></span><a href=\"http://www.h2o.ai/\" style=\"text-decoration:none;\"><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#333333;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">&#160;</span></span></span></span></span><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#1155cc;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:underline;\"><span>www.H2O.ai</span></span></span></span></span></span></a><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#333333;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">&#160;</span></span></span></span><span style=\"color:#000000;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">to learn more.</span></span></span></span></span><br><span style=\"font-variant:normal;white-space:pre-wrap;\"><span style=\"color:#ffffff;\"><span style=\"font-weight:400;\"><span style=\"font-style:normal;\"><span style=\"text-decoration:none;\">#LI-Hybrid</span></span></span></span></span></span></span>",
    "description_text": "Founded in 2012, H2O.ai is on a mission to democratize AI. As the world’s leading agentic AI company, H2O.ai converges Generative and Predictive AI to help enterprises and public sector agencies develop purpose-built GenAI applications on their private data. With a focus on Sovereign AI—secure, compliant, and infrastructure-flexible deployments—H2O.ai delivers solutions that align with the highest standards of data privacy and control.\n Our open-source technology is trusted by over 20,000 organizations worldwide, including more than half of the Fortune 500. H2O.ai powers AI transformation for companies like AT&T, Commonwealth Bank of Australia, Chipotle, Workday, Progressive Insurance, and NIH.\n H2O.ai partners include NVIDIA, Dell Technologies, Deloitte, Ernst & Young (EY), Snowflake, AWS, Google Cloud Platform (GCP), VAST Data and MinIO. H2O.ai’s AI for Good program supports nonprofit groups, foundations, and communities in advancing education, healthcare, and environmental conservation. With a vibrant community of 2 million data scientists worldwide, H2O.ai aims to co-create valuable AI applications for all users.\n H2O.ai has raised 256 million from investors, including Commonwealth Bank, NVIDIA, Goldman Sachs, Wells Fargo, Capital One, Nexus Ventures and New York Life.\n About This Opportunity\n H2O.ai is seeking a Product Security Engineer to join our Cloud Platform team and help scale our vulnerability management and security compliance operations. As H2O.ai serves highly regulated enterprises including major financial institutions and government agencies, maintaining robust security posture across our cloud platform is critical to customer success.\n You'll operationalize security practices across our containerized platform, manage vulnerability assessments for customer deployments, and ensure compliance with frameworks like FedRAMP, SOC2, and banking regulatory requirements. This role combines security engineering, cross-functional coordination, and customer-facing technical work to enable secure AI deployments at scale.\n This is an opportunity to build expertise in enterprise security operations while working with cutting-edge cloud-native technologies and making a direct impact on how Fortune 500 companies and government agencies deploy AI securely.\n This position is based in Sri Lanka. What You Will Do\n Analyze and triage vulnerability scan results from various security tools, investigating findings to understand actual risk and exploitability in context\n Work directly with engineering teams to understand remediation options, evaluate fix approaches, and coordinate timely resolution of security issues\n Route vulnerabilities to component owners and actively track remediation progress, following up to ensure completion within required timeframes\n Support FedRAMP continuous monitoring processes, including monthly POA&M management and compliance reporting\n Engage with customer security teams to address vulnerability findings, reconcile scan results, and support deployment approvals\n Maintain and extend our vulnerability management tooling and automation infrastructure\n Assess risk levels and communicate security findings to technical and non-technical stakeholders\n Support container image security controls and Kubernetes security policies across customer environments\n Contribute to security documentation, runbooks, and compliance artifacts for customer audits\n Participate in security incident response and customer escalations as needed\n What We Are Looking For\n 2-4 years of experience in application security, product security, or DevSecOps roles\n Strong understanding of container security, vulnerability management, and CVE assessment\n Ability to analyze vulnerability findings deeply - understanding exploit paths, affected components, and contextual risk\n Hands-on experience with security scanning tools\n Familiarity with Kubernetes security concepts and best practices\n Experience with compliance frameworks (FedRAMP, SOC2, ISO 27001, or banking regulations) preferred\n Scripting and automation skills (Python, Bash, & Go) to maintain security tooling\n Excellent written and verbal communication skills for cross-functional coordination with engineering teams\n Strong follow-through and ability to drive remediation efforts across multiple teams\n Detail-oriented mindset with ability to manage multiple priorities and deadlines\n Customer-focused approach with ability to translate technical security findings into business context\n Self-motivated and able to work effectively in a remote-first environment\n Why H2O.ai?\n Market leader in total rewards\n Remote-friendly culture\n Flexible working environment\n Be part of a world-class team\n Career growth\n Sounds exciting? Let’s talk! We’re looking for smart, curious engineers who are ready to take on the challenge! Apply now and help us shape the future of enterprise AI software.\n H2O.ai is committed to creating a diverse and inclusive culture. All qualified applicants will receive consideration for employment without regard to their race, ethnicity, religion, gender, sexual orientation, age, disability status or any other legally protected basis.\n H2O.ai is an innovative AI cloud platform company, leading the mission to democratize AI for everyone. Thousands of organizations from all over the world have used our cutting-edge technology across a variety of industries. We’ve made it easy for people at all levels to generate breakthrough solutions to complex business problems and advance the discovery of new ideas and revenue streams. We push the boundaries of what is possible with artificial intelligence.\n H2O.ai employs the world’s top Kaggle Grandmasters, the community of best-in-the-world machine learning practitioners and data scientists. A strong AI for Good ethos and responsible AI drive the company’s purpose.\n Please visit   www.H2O.ai   to learn more.\n #LI-Hybrid",
    "jsonld_jobposting": null
  },
  "list_job": {
    "id": "y8ULFS3c6a",
    "title": "Product Security Engineer",
    "detailUrl": "https://h2oai.applytojob.com/apply/jobs/details/y8ULFS3c6a?&"
  },
  "detail_errors": []
}