Senior Product Security Engineer

Job Summary

Working remotely from anywhere in the United States, the full-time Senior Product Security Engineer will manage SDLC functions for Databricks' products, focusing on security design reviews, threat modeling, and supporting incident response efforts.

Key responsibilities

• Conduct security design reviews, threat modeling, and manual code reviews for new product features
• Collaborate with security teams to support incident response and vulnerability response initiatives
• Maintain and enhance automation frameworks to support various security compliance requirements

Required qualifications

• Experience with the Threat Modeling process and design problem identification
• Understanding of Web Security, Cloud Security, Systems Security, and Applied Cryptography
• Proficiency in programming languages such as Python, Java, Scala, or JavaScript
• Skills in scripting and automation related to exploits
• Experience in exploit writing is highly desired