2 days ago
Responsibilities
- Design, develop, deploy, and maintain self-service security tools and services for the internal security platform.
- Lead end-to-end security projects and create new security capabilities within the platform.
- Automate and integrate SAST, DAST, SCA, and IAST controls into CI/CD pipelines and developer workflows.
- Architect and deploy secure multi-cloud environments across AWS, Azure, and GCP using infrastructure-as-code and configuration-management tools.
- Perform security architecture reviews, develop threat models, and provide security-as-code guidance.
- Collaborate with SRE and security teams on monitoring, security visibility, compliance, incident response, and operational security.
- Drive security engineering standards, platform adoption, DevSecOps training, and outreach across engineering teams.
- Mentor junior security team members and security advocates.
Requirements
- Bachelor’s or master’s degree in a related field or equivalent experience.
- Proven experience designing, developing, and deploying security tools and services used by engineering or security teams.
- Practical experience implementing security controls in CI/CD pipelines using tools such as Jenkins, GitLab CI, or GitHub Actions.
- Deep experience with cloud security engineering in AWS, Azure, and Google Cloud, including automated network provisioning and secure configuration management.
- Experience reviewing code in one or more of Java, Python, Go, or JavaScript/TypeScript.
- In-depth knowledge of Kubernetes operations and security, including Helm-based deployment and policy enforcement.
- Expertise with infrastructure-as-code and configuration-management tools such as Terraform, CloudFormation, or Ansible.
- Experience with HashiCorp Vault, Splunk, CrowdStrike, or similar security platforms.
- Understanding of web service frameworks, distributed architectures, and their security challenges.
- Experience conducting security reviews, threat modeling, and risk assessments for complex distributed systems.
- Security certifications such as CISSP or CISA are preferred but not required.
- Familiarity with Cloudera products or distributed computing systems is a preferred qualification.
Benefits
- Generous paid time off policy and paid volunteer time.
- Unplugged Days supporting work-life balance.
- Flexible work-from-home policy and hybrid work arrangement.
- Mental and physical wellness programs.
- Phone and internet reimbursement.
- Continued career development opportunities.
- Comprehensive benefits and competitive packages.
- Employee resource groups.
Tech Stack
AnsibleAWSAzureGitHub ActionsGitLab CI/CDGoGoogle CloudHelmJavaJavaScriptJenkinsKubernetesPythonSplunkTerraformTypeScript
Categories
About Cloudera
Cloudera builds the Cloudera Data Platform, an enterprise data stack for hybrid cloud and on‑premises environments that unifies data engineering, warehousing, streaming, and machine learning with governance. It sells subscriptions and managed services to large enterprises across regulated, data‑intensive industries. Founded in 2008 and headquartered in Santa Clara, the company was taken private in 2021 in a transaction led by Clayton, Dubilier & Rice (CD&R).