3 months ago
Remote, Poland or Remote, UkraineMid Level / Senior
Responsibilities
- Develop Python automation for security processes and secure-by-design CI/CD controls.
- Design and implement security controls for containerized production environments.
- Deploy and manage SAST, DAST, and SCA security testing tools.
- Lead threat modeling, review technical designs, and educate developers on secure coding practices.
- Conduct vulnerability, threat, and exploitability assessments and automate actionable remediation workflows.
- Investigate customer-reported security issues and incidents and coordinate fixes with Engineering and IT Security.
- Perform manual and AI-assisted code reviews and reproduce vulnerabilities in lab environments.
- Engage with customers, Sales, and Support to resolve security exposure and architecture concerns.
Requirements
- 3 to 5 years of experience in Product Security or Application Security roles.
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent experience.
- Fluency in Python for building security automation.
- Deep understanding of Linux containers, including internals and security isolation.
- Experience with Git-based collaboration and CI/CD integration using Jenkins, Harness, or GitHub Actions.
- Hands-on experience with Semgrep, Trivy, and Burp Suite.
- Strong knowledge of vulnerability assessment, threat modeling, secure coding, and manual code review.
- Ability to review Python, Go, and Node.js code for flaws such as broken access control and insecure business logic.
- Ability to work independently, make strategic security decisions, and communicate diplomatically with technical and business stakeholders.
- Familiarity with Kubernetes orchestration is strongly preferred.
Benefits
- Medical, dental, and vision insurance, depending on location and local legal requirements.
- Flexible Time Off Program and paid holidays.
- Paid parental leave.
- Global Employee Assistance Program (EAP).
- Additional benefits may be provided based on location and local legal requirements.
About DataRobot
DataRobot delivers the only agent workforce platform built for outcomes — not endless pilots.