Staff Product Security Engineer
Description For Staff Product Security Engineer
Databricks is seeking a Staff Product Security Engineer to join their Product Security Team. This role focuses on implementing and managing Security Development Lifecycle (SDLC) processes across all Databricks code bases. The position offers a unique opportunity to work with a global team across the US and EMEA, making a significant impact on product security.
The role involves comprehensive security responsibilities including threat modeling, security design reviews, manual code reviews, and exploit development. You'll be instrumental in supporting incident response and vulnerability response programs, while also working with various security tools and automation frameworks.
As a Staff Product Security Engineer, you'll be responsible for maintaining and enhancing security processes that support various compliance requirements such as FedRamp, PCI, and HIPAA. The position requires a strategic approach to security, focusing on risk management rather than purely theoretical security implementations.
Databricks offers competitive compensation with a base salary range of $142,500 to $273,200 USD, varying by location zones within the United States. The company is a leader in the data and AI space, serving over 10,000 organizations worldwide, including major enterprises and Fortune 500 companies.
The ideal candidate will bring 3-10 years of experience in threat modeling, strong programming skills in languages like Python/Java/Scala/JavaScript, and expertise in web security, cloud security, or applied cryptography. This role offers the opportunity to work remotely from anywhere in the United States while contributing to the security posture of a rapidly growing technology company.
Responsibilities For Staff Product Security Engineer
- Full SDLC Support for new product features including Threat Modeling, Design Review, Manual Code Review, Exploit writing
- Support Incident Response and Vulnerability Response programs
- Evaluate and identify false positives from SAST tools and file defects for real issues
- Work on DAST tools and related automation for auto-assessment and defect filing
- Maintain automation framework and add features to support security compliances
- Prioritize security from a risk management perspective
- Develop and implement security processes to improve SDLC process
Requirements For Staff Product Security Engineer
- 3-10 years Experience with Threat Modeling process
- Solid understanding of Web Security, Cloud Security, Systems Security or Applied Cryptography
- Proficient with Python/Java/Scala/JavaScript and ability to read code to identify security defects
- Strong skills on scripting and automation on exploits
- Fuzzing skills
- Exploit writing skills
Benefits For Staff Product Security Engineer
- Comprehensive benefits package
- Medical Insurance
- Dental Insurance
- Vision Insurance
Jobs Related To Databricks Staff Product Security Engineer
