Product Security Engineer

Data Robot delivers AI that maximizes impact and minimizes business risk. Our platform and applications integrate into core business processes so teams can develop, deliver, and govern AI aRobot empowers practitioners to deliver predictive and generative AI, and enables leaders to secure their AI assets. Organizations worldwide rely on Data Robot for AI that makes sense for their business — today and in the future.

Data Robot is seeking an experienced Product Security Engineer to drive day-to-day security while ensuring our platform meets the rigorous demands of our on‑premises and hosted customers. This is a highly technical, high‑impact role where you will operate at the intersection of engineering, automation, and security. You will serve as a member of our Engineering Product Security group, handle customer security inquiries, and build automation using Python.

This role requires a unique blend of technical expertise and diplomatic communication skills to navigate complex customer conversations.

• Automate Everything:
  Develop custom automation to manage security processes and implement “Secure‑by‑Design” processes in the CI/CD pipeline using Python.
• Container Security:
  Identify, design, and implement controls to safeguard our containerized production environments.
• Tooling Management:
  Deploy and manage product security testing tools for SAST, DAST, and SCA analysis (e.g., Semgrep, Trivy, Burp Suite).
• Threat Modeling:
  Review technical designs for new features, lead threat models to prioritize risks, and educate developer teams on secure coding practices.

• Threat Assessment & Security Analysis:
  Conduct and automate end‑to‑end vulnerability, threat, and exploitability assessments for actionable fixes and mitigations in Data Robot products.
• Incident Response:
  Perform initial technical investigation for customer reports and security incidents, coordinating with Engineering and IT Security to validate and track fixes.
• Customer Engagement:
  Work directly with Sales & Support teams to resolve concerns regarding security exposure and architecture.
• Customer‑Centric Communication:
  Balance business needs with security rigor. Stand firm on security policies while maintaining strong professional relationships through clear, diplomatic, and solutions‑oriented communication.

• Technical Proficiency:
  • Fluent in writing code using Python to build security automation.
  • Deep understanding of Linux containers (internals, security isolation).
  • Experience with Git‑based collaboration and automating software delivery through CI/CD integration (Jenkins, Harness, or Git Hub Actions).
  • Familiarity with Kubernetes orchestration is strongly preferred.
  • Hands‑on experience with security tools such as Semgrep, Trivy, and Burp Suite.
  • Ability to reproduce vulnerabilities in a lab environment to demonstrate impact.
  • Strong ability to perform manual code reviews or AI‑assisted reviews in Python, Go, and Node.js, looking for flaws that automated tools might miss (e.g., broken access control or insecure business logic).
  • Leveraged AI‑driven automation to accelerate secure code development and scale security assessments across the SDLC.
• Independence:
  Work independently on complex technical tasks with minimal supervision, while knowing when to elevate architectural decisions to Senior and Staff engineers.
• Strategic Mindset:
  Determine not just how to fix a bug, but why it happened and how to automate prevention systemically.
• Soft Skills:
  
  Strong communication skills for guiding teams and liaising with various stakeholders.

• 3 to 5 years of experience working in Product Security or Application Security roles.
• Bachelor’s in Computer Science, Cybersecurity, Information Systems, or a related field (or equivalent experience).

• Medical, Dental & Vision Insurance
• Flexible Time Off Program
• Paid Holidays
• Paid Parental Leave
• Global Employee Assistance Program (EAP)

Data Robot is proud to be an Equal Employment Opportunity and Affluent Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Data Robot is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.

Please see the United States Department of Labor’s EEO poster and EEO poster supplement for additional information.

All applicant data submitted is handled in accordance with our Applicant Privacy Policy.