Security Engineer

Business Area:

Engineering

Seniority Level:

Mid-Senior level

Job Description:

At Cloudera, we empower people to transform complex data into clear and actionable insights. With as much data under management as the hyperscalers, we’re the preferred data partner for the top companies in almost every industry. Powered by the relentless innovation of the open source community, Cloudera advances digital transformation for the world’s largest enterprises.

Dev Sec Ops  Engineer

Are you passionate about software security & implementing security tools that seamlessly integrate security into every phase of the software and infrastructure lifecycle? Do you want to champion the adoption of advanced Dev Sec Ops  practices and get your hands dirty implementing sophisticated, highly automated security tooling for multi-cloud and on-prem environments? Great, we’ve got the position for you!

Cloudera is looking for a Dev Sec Ops  Engineer with expertise in multi-cloud and on-prem security engineering to join a unique blended team. Bringing security operations experience, cloud infrastructure, and application security know-how, you and our highly collaborative team will play a crucial role in operating & maturing the security platform that underpins all of Cloudera’s products.

In this role, you will be a core member of our Product Security (Prod Sec) Platform team charged with deploying, maintaining, and operationalizing our internal security platform providing self-service tools to enable product teams to build and deploy securely by default. You will work as a critical part of our product security development process, delivering security visibility and tooling to internal teams and providing consultation on how to leverage the platform’s capabilities.

Our goal is to shift security left by building a mature, automated platform that reduces security toil for developers & security staff by allowing them to focus on innovation while ensuring security by design. You will be instrumental in improving the security posture of Cloudera software by onboarding & enabling internal teams to use self-service platform-based solutions to identify, prioritize, & resolve security issues.

We’re looking for individuals who want to redefine how security is delivered in a high-velocity engineering organization. You will have the opportunity to teach and learn from Kubernetes trailblazers and help blaze new paths for those following behind you.

• Develop, deploy, and support self-service security tools and services that constitute the internal security platform.
• Contribute knowledge and support for security projects, including support of tool integration and implementation of new security capabilities within the platform.
• Support & improve security integrations into CI/CD pipelines (SAST, DAST, SCA, IAST, etc.) and developer workflows.
• Maintain deployment of secure multi-cloud environments (AWS, Azure, GCP) using Infrastructure as Code (e.g., Terraform, Ansible).
• Assist with security architecture reviews of new products and features, contribute to threat models, and support adoption of security-as-code best practices.
• Work with the Site Reliability Engineering (SRE) team to maintain & respond to automated monitoring and security integrations for production systems.
• Collaborate with internal security teams to support compliance, incident response, and operational security requirements.
• Enable and support the adoption of security engineering best practices and standards across the organization.
• Evangelize the use of security platform tooling and deliver high-impact Dev Sec Ops  training and outreach to internal development & engineering teams.
• Participate members of the Security team and security advocates in advanced Dev Sec Ops  principles, platform engineering, and secure coding practices.

• Experience developing, deploying, or supporting security tools and services (e.g., security scanners, secrets management, policy engines) used by other engineering & security teams.
• Knowledge of Dev Sec Ops  principles and practical experience implementing security controls in CI/CD…