Staff Product Security Engineer
Description For Staff Product Security Engineer
Databricks is seeking a Staff Product Security Engineer to join their Product Security Team. This role focuses on implementing and managing Security Development Lifecycle (SDLC) processes across all Databricks code bases. The position involves conducting security design reviews, threat modeling, manual code reviews, and exploit development to ensure robust security measures. Working within a global team across US and EMEA, you'll be responsible for protecting Databricks' services through proactive security measures and incident response.
The role requires deep expertise in security engineering, with 5-10 years of experience in threat modeling and strong understanding of various security domains. You'll be working with multiple programming languages and will be instrumental in maintaining and improving security automation frameworks. The position offers the opportunity to work with cutting-edge technology at a leading data and AI company that serves over 10,000 organizations worldwide.
As a Staff Product Security Engineer, you'll have significant impact on Databricks' security posture, working on everything from SDLC support for new features to incident response and vulnerability management. The role combines technical depth with strategic thinking, requiring you to balance security best practices with practical risk management.
This is an excellent opportunity for a senior security professional looking to make a meaningful impact at a rapidly growing company that's at the forefront of data and AI technology. You'll be part of a global team working on critical security initiatives that protect both Databricks and its customers.
Responsibilities For Staff Product Security Engineer
- Full SDLC Support for new product features including Threat Modeling, Design Review, Manual Code Review, Exploit writing
- Support Incident Response and Vulnerability Response
- Work with SAST tools to evaluate and identify false positives and file defects
- Work on DAST tools and related automation for auto-assessment and defect filing
- Maintain automation framework and add features to support security compliances
- Help develop and implement security processes to improve SDLC process
- Prioritize security from a risk management perspective
Requirements For Staff Product Security Engineer
- 5-10 years Experience with Threat Modeling process
- Solid understanding of Web Security, Cloud Security, Systems Security or Applied Cryptography
- Proficient with Python/Java/Scala/JavaScript and ability to read code to identify security defects
- Strong skills on scripting and automation on exploits
- Fuzzing skills
- Exploit writing skills
Jobs Related To Databricks Staff Product Security Engineer
