Senior Product Security Engineer

Stack

Responsibilities

• ▹Develop custom automation for security processes and implement Secure-by-Design practices in the CI/CD pipeline using Python
• ▹Design and implement controls to safeguard containerized production environments
• ▹Deploy and manage product security testing tools for SAST, DAST and SCA (e.g. Semgrep, Trivy, Burp Suite)
• ▹Review technical designs for new features, lead threat modeling, and educate developers on secure coding practices
• ▹Conduct and automate vulnerability, threat and exploitability assessments
• ▹Perform initial technical investigation for customer reports and security incidents, coordinating with Engineering and IT Security
• ▹Work directly with Sales and Support teams to resolve security concerns

Requirements

• ▹Fluent in writing Python code for security automation
• ▹Deep understanding of Linux containers (internals, security isolation)
• ▹Experience with Git-based collaboration and CI/CD integration (Jenkins, Harness or GitHub Actions)
• ▹Familiarity with Kubernetes orchestration strongly preferred
• ▹Hands-on experience with security tools such as Semgrep, Trivy, Burp Suite
• ▹Ability to reproduce vulnerabilities in a lab environment
• ▹Strong manual or AI-assisted code review skills in Python, Go and Node.js
• ▹Ability to work independently on complex technical tasks, knowing when to escalate

Soft skills

About the company

DataRobot builds an AI platform and applications that integrate into core business processes, enabling organizations to develop, deliver and govern predictive and generative AI at scale.