Skip to content
DatabricksDatabricksUnited States

Product Security Engineer

Product Security Engineer embeds security in Databricks' SDLC through threat modeling, design reviews, code audits, exploit development, and tool automation. Requires 2-4 years threat modeling experience and proficiency in Python/Java/Scala/JavaScript.

152k – 261k
Remote2+ YOESecurity Engineering

About the role

Impact You Will Have

  • Full SDLC support for new product features: Threat Modeling, Design Review, Manual Code Review, Exploit writing, etc.
  • Support Incident Response and Vulnerability Response with other security teams.
  • Evaluate SAST tool results, identify false positives, and file defects.
  • Work on DAST tools and automation for auto-assessment and defect filing.
  • Maintain automation framework for security compliances (FedRamp, PCI, HIPAA, etc.).
  • Prioritize security from a risk management perspective.
  • Develop and implement security processes to improve productivity.

What We Look For

  • 2-4 years experience with Threat Modeling and finding design problems from data flow diagrams.
  • Understanding of at least two domains: Web Security, Cloud Security, Systems Security, Applied Cryptography.
  • Proficient in one or more programming languages (Python, Java, Scala, JavaScript) for identifying security defects.
  • Skilled in scripting and automation for exploits.
  • Fuzzing skills (nice-to-have).
  • Exploit writing skills (highly desired).

Skills

Threat ModelingPythonJavaScalaJavaScriptSASTDASTExploit WritingWeb SecurityCloud Security
Stripe

Security Engineer IC

StripeSeattle, WA

Design and implement infrastructure security controls, develop and manage infrastructure as code for cloud security, and conduct security assessments. Collaborate with cross-functional teams to address risks and enhance the security posture of the cloud environment.

159k – 238k
Hybrid2+ YOESecurity Engineering
Everlaw

Security Engineer (Security Operations)

EverlawOakland, CA

Security Engineer triages events, responds to incidents, manages AWS security services, and improves vulnerability management/threat detection on the security operations team. Requires 1-3 years security experience, scripting (Python), Linux, and security tools like SIEM and scanners.

159k – 201k
Hybrid1+ YOESecurity Engineering
Illumio

Software Engineer

IllumioSunnyvale, CA

Develop containerized microservices in Go for a multi-tenant cloud security platform that processes real-time cloud telemetry to deliver insights and risk recommendations. Own full SDLC, design, operations, and mentoring while partnering with Product on requirements.

141k – 162k
On-site2+ YOESecurity Engineering
Fluidstack

Security Engineer, Infrastructure

FluidstackNew York, NY +2

Builds and maintains security infrastructure including SIEM, data pipelines, and integrations for EDR, SOAR, CASB across IT, OT, cloud, and data centers. Embeds security into SDLC; requires 2+ years in security tooling and cloud/virtualization experience.

170k – 220k
On-site2+ YOESecurity Engineering
Applied Intuition

Enterprise Security Engineer

Applied IntuitionSunnyvale, CA

Lead enterprise security operations at Applied Intuition, managing device security, IAM, vulnerability management, third-party services, compliance, and risk across global workforce. Requires 2+ years cybersecurity experience, platform and network security expertise, and risk evaluation skills.

133k – 180k
On-site2+ YOESecurity Engineering