Product Security Engineer- AI/ML

About Modular

At Modular, we’re on a mission to revolutionize AI infrastructure by systematically rebuilding the AI software stack from the ground up. Our team, made up of industry leaders and experts, is building cutting-edge, modular infrastructure that simplifies AI development and deployment. By rethinking the complexities of AI systems, we’re empowering everyone to unlock AI’s full potential and tackle some of the world’s most pressing challenges.

If you’re passionate about shaping the future of AI and creating tools that make a real difference in people’s lives, we want you on our team. You can read about our culture and careers to understand how we work and what we value.

About the role:

As Modular’s first Security Engineer, you will establish and scale the foundation of our security program. You’ll design and implement security practices that enable our teams to build, deploy, and operate AI infrastructure safely and with confidence. This role combines hands-on technical depth with strategic influence, embedding “shift-left” security into the developer experience, driving secure software supply chain practices, and shaping incident response and governance across the organization. You’ll collaborate across Platform, Product, and IT teams to ensure that security accelerates, rather than constrains, our innovation.

LOCATION: This role will be based in our office in Los Altos, CA. 

What you will do:

• Define the strategy, metrics, and implementation plan for a successful security program that measurably improves Modular’s security maturity while supporting development velocity and business objectives.
• Analyze and strengthen the security of Modular’s software, infrastructure, and supply chain to prevent, detect, and respond to attacks.
• Stay up to date with the latest threats, vulnerabilities, and countermeasures across application, infrastructure, and supply chain security.
• Build and automate "shift-left" security practices within the software development lifecycle to help teams deliver secure code faster.
• Conduct risk assessments on third-party vendors, services, and software dependencies to identify and mitigate potential vulnerabilities.
• Develop and implement security policies and procedures for evaluating new technologies, software acquisitions, and integrations.
• Collaborate with engineering, IT, and procurement teams to ensure secure deployment and sourcing practices.
• Monitor for and investigate security incidents, coordinating response, containment, and remediation across teams.
• Educate and train staff on security best practices, awareness, and secure development principles.
• Contribute to the creation and maintenance of disaster recovery and business continuity plans to ensure resilience.

What you bring to the table:

• 7+ years of experience in security engineering, software engineering, or infrastructure security roles, with a strong understanding of secure system design and architecture.
• Deep knowledge of software supply chain security, including build system hardening, artifact signing, dependency management, and vulnerability scanning.
• Hands-on experience implementing “shift-left” security practices, integrating security into CI/CD, IaC, and developer workflows.
• Familiarity with incident response, threat modeling, and risk assessment processes, especially in fast-moving engineering environments.
• Proficiency in at least one systems language (C, C++, Go, or Rust) and one scripting language (Python, Bash, or similar).
• Strong collaboration skills, with the ability to work closely with developers, IT, and leadership to embed security into everyday operations.
• Excellent written and verbal communication skills, you can explain complex security issues clearly to both technical and non-technical audiences.
• Curiosity and creativity for solving complex problems, and a pragmatic, engineering-driven approach to building secure systems that empower innovation.
• Strongly identifies with our core company cultural values.

What Modular brings to the table:

• Amazing Team. We are a progressive and agile team with some of the industry’s best engineering and product leaders.
• World-class Benefits. In order to attract the best, we need to offer the best. Premier insurance plans, up to 5% 401k matching, flexible paid time off, and more are available to you! Please note that specific benefit packages may vary based on your location.
• Competitive Compensation. We offer very strong compensa