Product Security Engineer - Remote

Overview

The Product Security Engineer will be responsible for managing SDLC functions for features and products within Databricks, focusing on reducing vulnerabilities in production and supporting incident response.

In Short

• Full SDLC Support for new product features.
• Conduct Threat Modeling and Design Reviews.
• Perform Manual Code Reviews and Exploit Writing.
• Support Incident Response and Vulnerability Response.
• Evaluate SAST tool results for false positives.
• Work on DAST tools and automation for assessments.
• Maintain automation framework for security compliance.
• Prioritize security from a risk management perspective.
• Implement security processes to improve productivity.

Requirements

• 2-4 years of experience with Threat Modeling.
• Understanding of Web, Cloud, Systems Security, and Cryptography.
• Proficient in programming languages: Python, Java, Scala, JavaScript.
• Skilled in scripting and automation.
• Fuzzing skills are a plus.
• Exploit writing skills are highly desired.

Benefits

• Comprehensive benefits and perks.
• Eligibility for annual performance bonus.
• Equity opportunities.
• Diversity and inclusion commitment.