Sr. Staff Security Engineer

3 weeks ago

San Francisco CA, United States DataBricks Full time

RDQ224R256Product Security Mission:The Product Security Team's mission is to Left-shift SDLC (Security Development Lifecycle) processes for ALL code written in Databricks (for Customer Use or Supporting Customer internally) to reduce the likelihood of introducing new vulnerabilities in production and minimize the count and effect of externally identified vulnerabilities on Databricks Services.Role Description:You will be a security architect on the product security team at Databricks, responsible for securing the non-ENG applications, products and integrations which drives the internal functions of Databricks and its customers. The role is extremely critical since you would be working closely across every non-ENG department, including but not limited to IT, Finance, Marketing, HR, etc to ensure that any software that is developed, deployed or integrated within Databricks is done so securely and we minimize any risk of getting compromised. This would include, but is not limited to, security design reviews, threat models, cloud architecture review, 3rd-party integration reviews, code reviews, exploit writing and exploit chain creation. You will also support IR and VRP programs when there is a vulnerability report or a product security incident. You will work closely with cross-functional teams within the organization to design, implement, and manage secure architectures that protect the company's data and provide compliance with industry standards and governance policies.Key ResponsibilitiesDevelop and maintain a security architecture strategy that aligns with the organization's risk management and governance policies.Evaluate and recommend security technologies that fortify the company's data and application infrastructure.Engage in security design and architecture reviews of large inter-department projects, ensuring compliance with the latest security practices and standards focusing on access control, authentication, encryption, secure data processing, etc.Collaborate with IT and other non-ENG business leaders to develop a cohesive security posture that balances risk and business requirements.Conduct system security and vulnerability analyses, risk assessments, and provide recommendations to mitigate risks.Stay up-to-date with emerging threats and provide guidance to teams as required.Coordinate with legal and regulatory experts to understand the implications of privacy laws, and ensure that the architecture complies with these requirements.Mentor and provide guidance to other team members in security best practices.What we look for:Solid understanding of product security fundamentals with expertise on Threat Modeling, and a working knowledge of exploit writing.Deep understanding of cloud security architecture, security protocols, cryptography, authentication, authorization, security vulnerabilities, and remediation techniques.Experience securing common Business Systems (e.g. Salesforce/Workday/Netsuite) as well as their associated integrations (e.g. APIs or other external connections)Demonstrates lead-by-influence by executing through other leadersProfessional security certification is a plus (e.g., OSCP, OSCE).Experience with security frameworks (e.g., NIST, ISO) and regulations (e.g., GDPR, HIPAA).Excellent communication skills, with the ability to explain complex security concepts to a variety of audiences.Demonstrated problem-solving skills and the ability to work under pressure.Typically 15+ years of experience or advanced degree +12 years of experience in the security domain.BS or higher in Computer Science or Computer EngineeringBenefits Medical, Dental, and Vision401(k) PlanFSA, HSA and Commuter Benefit PlansEquity AwardsFlexible Time OffPaid Parental Leave Family PlanningFitness ReimbursementAnnual Career Development FundHome Office/Work Headphones ReimbursementEmployee Assistance Program (EAP)Business Travel Accident InsuranceMental Wellness ResourcesPay Range TransparencyDatabricks is committed to fair and equitable compensation practices. The pay range(s) for this role is listed below and represents base salary range for non-commissionable roles or on-target earnings for commissionable roles.  Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to job-related skills, depth of experience, relevant certifications and training, and specific work location. Based on the factors above, Databricks utilizes the full width of the range. The total compensation package for this position may also include eligibility for annual performance bonus, equity, and the benefits listed above. For more information regarding which range your location is in visit our page here.Zone 1 Pay Range$176,300—$311,900 USDAbout DatabricksDatabricks is the data and AI company. More than 10,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark, Delta Lake and MLflow. To learn more, follow Databricks on Twitter, LinkedIn and Facebook.Our Commitment to Diversity and InclusionAt Databricks, we are committed to fostering a diverse and inclusive culture where everyone can excel. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at Databricks are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.ComplianceIf access to export-controlled technology or source code is required for performance of job duties, it is within Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.

  • Sr. Staff Application Security Engineer

    2 days ago

    San Francisco, CA, United States Aurora Innovation Full time

    Aurora hires talented people with diverse backgrounds who are ready to help build a transportation ecosystem that will make our roads safer, get crucial goods where they need to go, and make mobility more efficient and accessible for all. Aurora’s Product Security team’s mission is to discover, mitigate, and prevent security risks in the software,...

  • Staff Software Engineer

    2 days ago

    San Francisco, CA, United States Opal Security Full time

    Opal is building the next generation of access management. We've all felt the pain of not getting the access we need to do our job. At Opal, we’re building a central hub for authorization to make access management automated, intelligent, and easy to use. We are taking an age old problem in enterprise software and making it simple. Our product prioritizes...

  • Product Security Engineer

    2 days ago

    San Francisco, CA, United States Opal Security Full time

    Opal is building the next generation of access management. We've all felt the pain of not getting the access we need to do our job. At Opal, we’re building a central hub for authorization to make access management automated, intelligent, and easy to use. We are taking an age old problem in enterprise software and making it simple. Our product prioritizes...

  • Staff Software Engineer

    1 day ago

    San Francisco, United States Abnormal Security Full time

    Job DescriptionJob DescriptionAbout the RoleAbnormal Security is looking for a Staff Software Engineer to drive large initiatives for our core R&D divisions. Our team builds the reusable components such as Account Management, Notifications and Feature Flags to enable other teams to rapidly develop their applications. At Abnormal, we keep our...

  • Sr. Staff Application Security Engineer

    5 days ago

    San Francisco, United States Aurora CO Full time

    Who We Are Aurora (Nasdaq: AUR) is delivering the benefits of self-driving technology safely, quickly, and broadly to make transportation safer, increasingly accessible, and more reliable and efficient than ever before. The Aurora Driver is a self-driving system designed to operate multiple vehicle types, from freight-hauling semi-trucks to ride-hailing...

  • Sr. Staff Engineer

    3 weeks ago

    San Francisco, United States Gap Inc. Full time

    About the Role The Sourcing and Global PO product line is searching for a Sr. Staff Software Engineer. This is a group of product teams that are the innovation engine of Global Sourcing at Gap Inc. The teams create tools that are used for end-to-end Supply Chain Management, Global Purchase Order management, Product Costing, and Vendor Profile. These tools...

  • Staff Software Security Engineer

    2 days ago

    San Francisco, CA, United States Square Full time

    Founded in July 2021, TBD is one of Block's four business units, alongside Square, Cash App, and TIDAL. At TBD, we believe in a decentralized future that returns ownership and control over your finances, data, and identity. Guided by this vision, TBD is building an open source platform and developer infrastructure that enables everyone to access and...

  • Security Engineer

    2 days ago

    San Francisco, CA, United States X Corp. Full time

    Are you prepared to join the X team and help build the ultimate real-time information-sharing app, revolutionizing how people connect? At X, we're on a mission to become a trusted global digital public square, committed to minimal censorship within legal boundaries. Our goal is to empower every user to freely create and share ideas, fostering open public...

  • Staff Software Security Engineer

    2 days ago

    San Francisco, CA, United States Square Full time

    Company Description Founded in July 2021, TBD is one of Block's four business units, alongside Square, Cash App, and TIDAL. At TBD, we believe in a decentralized future that returns ownership and control over your finances, data, and identity. Guided by this vision, TBD is building an open source platform and developer infrastructure that enables everyone...

  • Product Security Engineer

    5 days ago

    San Francisco, United States Opal Security Full time

    Opal is building the next generation of access management. We've all felt the pain of not getting the access we need to do our job. At Opal, we’re building a central hub for authorization to make access management automated, intelligent, and easy to use. We are taking an age old problem in enterprise software and making it simple. Our product prioritizes...

  • Sr./Staff FullStack Backend Leaning Engineer

    2 days ago

    San Francisco, CA, United States Dice Full time

    Dice is the leading career destination for tech experts at every stage of their careers. Our client, Motion Recruitment Partners, LLC, is seeking the following. Apply via Dice today! A San Francisco based startup in the HealthTech space is looking to grow their team and currently looking for a hybrid Full Stack (Backend Leaning) Engineer. They are...

  • Staff Security Engineer, Cloud Infrastructure

    2 days ago

    San Francisco, CA, United States Flexport Full time

    Enable Flexport to become the most trusted company in global trade . The opportunity:  Flexport is looking for a Staff Security Engineer to help Flexport establish itself as the most trusted company in the global trade ecosystem. As a Staff Security Engineer, Cloud Infrastructure, you will be responsible for enabling visibility across our cloud...

  • Software Engineer

    2 days ago

    San Francisco, CA, United States Equilibrium Energy Full time

    What we are looking for We are looking for Software Engineers to contribute across our end-to-end platform. Our software engineers work across cloud infrastructure and distributed systems, data engineering, ML engineering and MLOps, simulation ecosystems, complex workflow orchestration, microservices mesh, application development and security. Our...

  • Staff Product Security Engineer

    2 days ago

    San Francisco, CA, United States Discord Full time

    Discord empowers people to create spaces where they can find a sense of belonging in their lives. Millions of people trust Discord to keep their communications secure, private, and out of the hands of evildoers, so security and privacy are necessary to Discord's success. We are looking for a Security Engineer reporting to the Product Security Engineering...

  • Staff Security Engineer

    5 days ago

    San Francisco, California, United States Crusoe Energy Systems Full time

    Crusoe Energy is on a mission to unlock value in stranded energy resources through the power of computation.Take a look at what we do - We aim to align the long term interests of the climate with the future of global computing infrastructure. As data centers consume an exponentially growing power footprint to deliver technology to all connected devices, we...

  • Staff Security Engineer

    5 days ago

    San Francisco, California, United States Crusoe Energy Systems Full time

    Crusoe Energy is on a mission to unlock value in stranded energy resources through the power of computation.Take a look at what we do - We aim to align the long term interests of the climate with the future of global computing infrastructure. As data centers consume an exponentially growing power footprint to deliver technology to all connected devices, we...

  • Sr Backend Engineer

    2 days ago

    San Francisco, CA, United States TalentFish Full time

    Job Title: Sr Backend Engineer Primary Location: Remote Position Type: Direct Hire Overview TalentFish is casting a line for a Sr Backend Engineer. This is a remote direct hire role. This is a pivotal technical leadership role, crafting an immersive and user-friendly healthcare app using ReactJS, Firebase, and Node.js. What You Bring To The Role. ...

  • Staff Product Security Engineer

    2 days ago

    San Francisco, CA, United States Discord Full time

    Discord empowers people to create spaces where they can find a sense of belonging in their lives. Millions of people trust Discord to keep their communications secure, private, and out of the hands of evildoers, so security and privacy are necessary to Discord's success. We are looking for a Security Engineer reporting to the Product Security...

  • Sr. Product Security Engineer

    2 days ago

    San Francisco, CA, United States Databricks Full time

    Government information security and federal contractor regulations, including Department of Defense Cloud Computing Security Requirements for Impact Level 6 Cloud Service Provider personnel, and facilitate compliance with other regulations such as FedRAMP High baseline, and requirements of certain federal contracts, this role is open to United States...

  • Principal or Staff Escalations Engineer

    2 days ago

    San Jose, CA, United States Zscaler Full time

    The Principal or Staff Escalation Engineer will be responsible for solving some of the toughest customer issues. You would be working on highly critical escalations with exec visibility inside the organization. You would also be providing technical assistance to other internal support and escalation engineers as part of the global escalation team. The Sr...