Director of Platform and Product Security

About Nscale

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future.

About the Role

We are hiring a Director of Platform and Product Security to lead the security of Nscale’s core infrastructure platform and the software and services built on top of it. This is a hands-on engineering leadership role reporting directly to the CISO and working closely with Platform Engineering, Infrastructure, SRE, and product development teams. You will own two complementary disciplines: protecting our Kubernetes-based, multi-tenant AI cloud platform and embedding strong product security practices into the software lifecycle. This role is critical to how Nscale operates AI infrastructure at scale. You will build and lead teams that ship practical security controls, ensuring security strengthens the platform without becoming a drag on performance or deployment velocity.

What you'll be doing

• Platform Security
• Own the security architecture and controls for Nscale’s Kubernetes-based infrastructure, including workload isolation, admission control, RBAC, runtime enforcement, and tenant boundary integrity.
• Secure customer production workloads by defining and strengthening controls at the boundary between Nscale’s infrastructure responsibilities and customer-managed workloads.
• Drive encryption standards and key management across platform services, covering data at rest, data in transit, and cryptographic practices across internal and customer-facing services.
• Lead cloud security posture management across environments through configuration baselines, IAM governance, automated guardrails, and continuous remediation.
• Supply Chain and Deployment Security
• Build and operate image integrity and supply chain security capabilities, including image signing, provenance verification, and base image governance.
• Embed security into deployment pipelines with security gates that support delivery speed rather than block it.
• Establish safe deployment practices and rollback mechanisms for issues identified during release or operation.
• Product Security
• Own the security of software built and deployed on the Nscale platform through threat modeling, secure design review, and early security requirements in the development lifecycle.
• Build and scale application security tooling, including SAST, SCA, DAST, and secrets detection, integrated into CI/CD.
• Strengthen service security across the platform, including authentication and authorization between services, API security, and secure communication patterns.
• Partner directly with engineering teams to identify, prioritize, and remediate vulnerabilities.
• AI-Assisted Development Governance
• Enable the safe use of AI coding tools across engineering teams.
• Define secure usage patterns for AI-assisted development workflows.
• Evaluate risks in AI-generated code, including insecure code generation patterns, prompt injection concerns, and over-reliance on AI review.
• Integrate security checks into AI-assisted development processes to support secure scale-up.

About You

• 15+ years in security engineering, with at least 5 years in a leadership role managing security engineers across more than one domain.
• Deep hands-on experience designing and operating security controls for Kubernetes-orchestrated production infrastructure.
• Proven experience with admission control, RBAC, network policy, runtime security, workload isolation, and multi-tenant boundary enforcement.
• Strong understanding of securing platforms that run customer workloads you do not control, including shared responsibility boundaries.
• Experience owning product security or application security programs, including threat modeling, secure SDLC, and developer-facing security practices.
• Ability to design security controls with performance impact and deployment velocity in mind.
• Strong engineering orientation with the ability to engage directly on architecture, code, and tooling decisions.
• Experience securing workloads in multi-cloud environments across AWS, GCP, and/or Azure, including IAM, account governance, configuration management, and posture monitoring.
• Familiarity with the security implications of AI-assisted development, including prompt injection, insecure code generation, and over-reliance on AI review.
• Preferred experience in GPU, HPC, or AI workload environments, plus exposure to tools such as CSPM platforms, Sigstore, Cosign, Terraform, OPA Gatekeeper, Kyverno, Go, or Python.

What we can offer you

At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core. Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support.

Human-First Flexibility: We treat you as humans first. Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.

Equal Opportunities Statement: We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds. If there’s anything we can do to accommodate your specific situation, please let us know.

The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role.