Senior Product Security Engineer

March 20

Apply Now

Receive Emails with Similar Jobs

Databricks

WebsiteLinkedInAll Job Openings

Databricks is the lakehouse company$1. .$1

Apache Spark • Apache Spark Training • Cloud Computing • Big Data • Data Science

1001 - 5000

💰 $1.6G Series H on 2021-08

Description

• Full SDLC Support for new product features being developed in ENG and non-ENG teams. This would include Threat Modeling, Design Review, Manual Code Review, Exploit writing, etc. • Work with other security teams to provide support for Incident Response and Vulnerability Response as and when needed. • Work with the results of SAST tools to help evaluate and identify false positives and file defects for real issues. • Work on DAST tools and related automation for auto-assessment and defect filing. • Maintain the automation framework and add new features as needed to support different security compliances that Databricks may want to get into – FedRamp, PCI, HIPPA, etc. • Prioritize security from a risk management perspective, rather than an absolute textbook version. • Help develop and implement security processes to improve the overall productivity of the product security organization and the SDLC process in general

Requirements

• 3+ years of experience with the Threat Modeling process and ability to find design problems based on a block diagram of data flow. • Solid understanding on at least two of the following domains - Web Security, Cloud Security, Systems Security and Applied Cryptography. • 3+ years of experience with one or more of Python/Java/Scala/JavaScript and ability to read code to identify security defects. • Strong skills on scripting and automation on exploits • Fuzzing skills are good to have. • Exploit writing skills is a positive and greatly required.

Benefits

• Private medical insurance • Private dental insurance • Health Cash Plan • Life, income protection & critical illness insurance • Pension Plan • Equity awards • Enhanced Parental Leaves • Fitness reimbursement • Annual career development fund • Home office & work headphones reimbursement • Business travel accident insurance • Mental wellness resources • Employee referral bonus