Staff Product Security Engineer - Remote

Overview

The Product Security Team's mission is to Left-shift SDLC (Security Development Lifecycle) processes for ALL code written in Databricks to reduce the likelihood of introducing new vulnerabilities in production and minimize the count and effect of externally identified vulnerabilities on Databricks Services.

In Short

• Full SDLC Support for new product features being developed.
• Support Incident Response and Vulnerability Response.
• Evaluate and identify false positives from SAST tools.
• Work on DAST tools and related automation.
• Maintain the automation framework for security compliance.
• Prioritize security from a risk management perspective.
• Develop and implement security processes to improve productivity.

Requirements

• 3-10 years Experience with Threat Modeling.
• Understanding of Web Security, Cloud Security, Systems Security, and Applied Cryptography.
• Proficient in Python, Java, Scala, or JavaScript.
• Strong skills in scripting and automation on exploits.
• Fuzzing skills are a plus.
• Exploit writing skills are highly desired.

Benefits

• Comprehensive benefits and perks.
• Eligibility for annual performance bonus.
• Equity options available.
• Diversity and inclusion initiatives.