Product Security Engineer

Stack

Responsibilities

• ▹Develop custom automation to manage security processes and implement Secure-by-Design in the CI/CD pipeline using Python
• ▹Identify, design, and implement controls to safeguard containerized production environments
• ▹Deploy and manage product security testing tools for SAST, DAST, and SCA analysis (e.g. Semgrep, Trivy, Burp Suite)
• ▹Review technical designs for new features, leading threat models to prioritize risks
• ▹Conduct and automate end-to-end vulnerability, threat, and exploitability assessments
• ▹Perform initial technical investigation for customer reports and security incidents, coordinating with Engineering and IT Security
• ▹Work directly with Sales & Support teams to resolve concerns regarding security exposure and architecture
• ▹Balance business needs with security rigor through clear, diplomatic communication

Requirements

• ▹Fluent in Python for building security automation
• ▹Deep understanding of Linux containers (internals, security isolation)
• ▹Experience with Git-based collaboration and CI/CD integration (Jenkins, Harness, or GitHub Actions)
• ▹Familiarity with Kubernetes orchestration strongly preferred
• ▹Hands-on experience with security tools such as Semgrep, Trivy, and Burp Suite
• ▹Ability to reproduce vulnerabilities in a lab environment
• ▹Strong ability to perform manual or AI-assisted code reviews in Python, Go, and Node.js
• ▹Ability to work independently on complex technical tasks with minimal supervision, knowing when to escalate

Soft skills

About the company

DataRobot delivers AI that maximizes impact and minimizes business risk. Its platform and applications integrate into core business processes so teams can develop, deliver, and govern AI at scale, empowering practitioners to deliver predictive and generative AI and enabling leaders to secure their AI assets.