{"id":2504311,"url":"https://alion.io/job/h2o-product-security-engineer-h2o-ai","title":"Product Security Engineer - h2o.ai","company":{"id":21209,"name":"H2O","domain":"h2o.ai","url":"https://alion.io/company/h2o","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Colombo, Sri Lanka"],"countries":["LK"],"hiring_countries":["LK"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":13000,"max_usd":32000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CircleCI","optional":false},{"name":"CVE","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Machine Learning","optional":false},{"name":"MinIO","optional":false},{"name":"npm","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"Snowflake","optional":false},{"name":"SOC 2","optional":false},{"name":"Trivy","optional":false}],"status":"live","first_seen_at":"2026-10-14T07:10:38Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-27T04:24:16Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"Founded in 2012, H2O.ai is on a mission to democratize AI. As the world’s leading agentic AI company, H2O.ai converges Generative and Predictive AI to help enterprises and public sector agencies develop purpose-built GenAI applications on their private data. With a focus on Sovereign AI-secure, compliant, and infrastructure-flexible deployments-H2O.ai delivers solutions that align with the highest standards of data privacy and control.\nOur open-source technology is trusted by over 20,000 organizations worldwide, including more than half of the Fortune 500. H2O.ai powers AI transformation for companies like AT&T, Commonwealth Bank of Australia, Chipotle, Workday, Progressive Insurance, and NIH.\nH2O.ai partners include NVIDIA, Dell Technologies, Deloitte, Ernst & Young (EY), Snowflake, AWS, Google Cloud Platform (GCP), VAST Data and MinIO. H2O.ai’s AI for Good program supports nonprofit groups, foundations, and communities in advancing education, healthcare, and environmental conservation. With a vibrant community of 2 million data scientists worldwide, H2O.ai aims to co-create valuable AI applications for all users.\nH2O.ai has raised 256 million from investors, including Commonwealth Bank, NVIDIA, Goldman Sachs, Wells Fargo, Capital One, Nexus Ventures and New York Life.\nAbout This Opportunity\nH2O.ai is seeking a Product Security Engineer to join our Product Security Engineering team and help scale our vulnerability management and security compliance operations. As H2O.ai serves highly regulated enterprises including major financial institutions and government agencies, maintaining robust security posture across our cloud platform is critical to customer success.\nYou'll manage vulnerability scanning and assessment across our containerized platform, lead triage and analysis of security findings, and work closely with engineering teams to coordinate fixes - and remediate vulnerabilities hands-on yourself, upgrading dependencies, rebuilding container images, and shipping patches. You will also work on building automation to optimize our product security workflows. Your work will support compliance requirements for FedRAMP, SOC2, and banking regulations by ensuring timely vulnerability remediation. This role combines hands-on vulnerability remediation, security tooling development, vulnerability analysis, and cross-functional coordination to centralize vulnerability management expertise, allowing engineering teams to focus on their core product work.\nThis is an opportunity to build expertise in enterprise security operations while working with cutting-edge cloud-native technologies and making a direct impact on how large Fortune 500 companies and government agencies deploy AI securely.\nThis position is based in Sri Lanka.\nWhat You Will Do\nOwn and lead analysis and triage of vulnerability scan results from multiple security tools, investigating findings to understand actual risk and exploitability in context\nWork directly with engineering teams to understand remediation options, evaluate fix approaches, and coordinate timely resolution of security issues\nRemediate vulnerabilities hands-on: upgrade dependencies, rebuild container images with patched components, and contribute fixes directly to product codebases\nTest fixes thoroughly and verify remediation by re-scanning before and after deployment\nRoute vulnerabilities to component owners and actively track remediation progress, following up to ensure completion within required timeframes\nSupport FedRAMP continuous monitoring processes, including monthly POA&M management and compliance reporting\nEngage with customer security teams to address vulnerability findings, reconcile scan results, and support deployment approvals\nMaintain and extend our vulnerability management tooling and automation infrastructure\nBuild automations and processes that eliminate manual work and support continuous security improvement across the platform\nAssess risk levels and communicate security findings to technical and non-technical stakeholders\nSupport container image security controls and Kubernetes security policies across customer environments\nContribute to security documentation, runbooks, and compliance artifacts for customer audits\nParticipate in security incident response and customer escalations as needed\nWhat We Are Looking For\n3+ years of software engineering experience.\nStrong coding skills in at least 2 languages (Python, JavaScript, Go, Ruby, Java, etc.)\nComfortable reading, writing, debugging, and deploying code.\nExperience with dependency management (npm, pip, maven, bundler, etc.)\nCI/CD experience (GitHub Actions, GitLab CI, Jenkins, CircleCI, etc.)\nGit proficiency (branching, PRs, code review)\nTesting mindset (write and run tests to validate fixes)\nStrong understanding of container security, vulnerability management, and CVE assessment.\nAbility to analyze vulnerability findings deeply - understanding exploit paths, affected components, and contextual risk.\nHands-on experience with security scanning tools (e.g Trivy, AWS Inspector, Aquasec).\nFamiliarity with Kubernetes security concepts and best practices.\nExcellent written and verbal communication skills for cross-functional coordination with engineering teams.\nStrong follow-through and ability to drive remediation efforts across multiple teams.\nDetail-oriented mindset with ability to manage multiple priorities and deadlines.\nCustomer-focused approach with ability to translate technical security findings into business context.\nSelf-motivated and able to work effectively in a remote-first environment.\nHow to Stand Out From the Crowd\nExperience in application security, product security, or DevSecOps roles.\nExperience with compliance frameworks (FedRAMP, SOC2, ISO 27001, or banking regulations) preferred.\nWhy H2O.ai?\nMarket leader in total rewards\nRemote-friendly culture\nFlexible working environment\nBe part of a world-class team\nCareer growth\nSounds exciting? Let’s talk! We’re looking for smart, curious engineers who are ready to take on the challenge! Apply now and help us shape the future of enterprise AI software.\nH2O.ai is committed to creating a diverse and inclusive culture. All qualified applicants will receive consideration for employment without regard to their race, ethnicity, religion, gender, sexual orientation, age, disability status or any other legally protected basis.\nH2O.ai is an innovative AI cloud platform company, leading the mission to democratize AI for everyone. Thousands of organizations from all over the world have used our cutting-edge technology across a variety of industries. We’ve made it easy for people at all levels to generate breakthrough solutions to complex business problems and advance the discovery of new ideas and revenue streams. We push the boundaries of what is possible with artificial intelligence.\nH2O.ai employs the world’s top Kaggle Grandmasters, the community of best-in-the-world machine learning practitioners and data scientists. A strong AI for Good ethos and responsible AI drive the company’s purpose.\nPlease visitwww.H2O.ai to learn more.\n#LI-HybridFor information about how H2O.ai collects, uses, and protects your personal information during the recruitment process, please review our Candidate Privacy Notice.","description_format":"text","description_chars":7279,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"Sri Lanka","iso":"LK","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Machine Learning","AI Development Tools"],"lifecycle":[{"event":"open","at":"2026-10-14T07:10:38Z"}],"visa":[],"liveness":{"score":44,"band":"fade","label":"Fading","p_open":1,"p_active":0.8,"p_room":0.55,"age_days":12,"expected_fill_days":9,"reasons":["conf:1","velocity","win:tail"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/h2o-product-security-engineer-h2o-ai","json_url":"https://alion.io/job/h2o-product-security-engineer-h2o-ai.json","meta":{"generated_at":"2026-10-27T08:15:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9150,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":21209},"rest":"https://alion.io/mcp/rest/get_company?id=21209"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fh2o-product-security-engineer-h2o-ai"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fh2o-product-security-engineer-h2o-ai"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fh2o-product-security-engineer-h2o-ai"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/h2o-product-security-engineer-h2o-ai\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fh2o-product-security-engineer-h2o-ai"}]}