Cloudera · 4 hours ago
Staff Security Engineer - Product Security
United States
Full-time
Remote
Lead/StaffCloudera empowers people to transform complex data into actionable insights and is seeking a Staff DevSecOps Engineer to enhance their security platform. This role involves leading the integration of security into the software lifecycle and developing self-service security tools to support product teams in secure deployments.
AnalyticsArtificial Intelligence (AI)Cloud ComputingData GovernanceData ManagementEnterprise SoftwareMachine LearningSoftware
No H1B
Hiring Manager
Maria Hogan
Responsibilities
Design, develop, and deploy self-service security tools and services that constitute the internal security platform
Lead complex security projects, including end-to-end ownership of tool development and the creation of new security capabilities within the platform
Automate and integrate security controls into CI/CD pipelines (SAST, DAST, SCA, IAST, etc.) and developer workflows
Lead the architecture and deployment of secure multi-cloud environments (AWS, Azure, GCP) using Infrastructure as Code (e.g., Terraform, Ansible)
Perform security architecture reviews of new products and features, develop threat models, and provide security-as-code best practices
Collaborate with the Site Reliability Engineering (SRE) team to embed & maintain automated monitoring and security visibility into production systems
Collaborate with internal security teams to support compliance, incident response, and operational security requirements
Develop, refine, and drive the adoption of security engineering best practices and standards across the organization
Evangelize the use of security platform tooling and deliver high-impact DevSecOps training and outreach to internal development & engineering teams
Mentor junior members of the Security team and security advocates in advanced DevSecOps principles, platform engineering, and secure coding practices
Qualification
Required
Proven experience designing, developing, and deploying security tools and services (e.g., security scanners, secrets management, policy engines) used by other engineering & security teams
Expertise in DevSecOps principles and practical experience implementing security controls in CI/CD pipelines (e.g., Jenkins, GitLab CI, GitHub Actions)
Deep experience with large-scale cloud security engineering in AWS, Azure, and Google Cloud, including automated network provisioning and secure configuration management
Experience with code review of one or more programming languages (Java, Python, Go, JS/TS)
In-depth knowledge of Kubernetes operations, security, and using tools like Helm for deployment and policy enforcement
Expertise in Infrastructure as Code (IaC) & configuration management tools like Terraform, Cloudformation, or Ansible
Demonstrated experience with security tools and platforms, including HashiCorp Vault for secrets management, Splunk for security monitoring and analytics, and CrowdStrike or similar EDR solutions for endpoint security
Deep understanding of web service frameworks, distributed architectures (event-driven, microservices, serverless), and their corresponding security challenges
Experience performing security reviews, developing and reviewing threat models, and conducting risk assessments against complex distributed systems
Preferred
Security certifications (CISSP, CISA, etc.) are a bonus but not required
Familiarity with Cloudera's products or other distributed computing systems is a strong bonus, or a willingness to dig into our products to truly understand how they work
Benefits
Generous PTO Policy
Support work life balance with Unplugged Days
Flexible WFH Policy
Mental & Physical Wellness programs
Phone and Internet Reimbursement program
Access to Continued Career Development
Comprehensive Benefits and Competitive Packages
Paid Volunteer Time
Employee Resource Groups
Company
Cloudera
Cloudera is a software development company that offers data management and cloud-native data analytic solutions.
Founded in 2008
1001-5000 employees
Funding
Current Stage
Public CompanyTotal Funding
$1.04BKey Investors
Intel CapitalT. Rowe PriceAccel
2021-06-01Acquired
2018-04-07Post Ipo Secondary
2017-04-28IPO
Leadership Team
Charles Sansbury
Chief Executive Officer
Mary Rorabaugh
Vice President, Finance
Recent News
2025-12-15
Computer Weekly
2025-12-11
Company data provided by crunchbase