Staff Product Security Engineer

4 hours ago

Tokyo, JapanStaff+

Responsibilities

Lead Federal security strategy and support acquisition and maintenance of Authority to Operate at FedRAMP High and DoD IL5 levels.
Translate federal controls, including NIST 800-53, into actionable engineering requirements for commercial developers.
Write and maintain security policies and procedures, including SSPs, and manage POA&Ms and third-party audit evidence.
Build security automation and secure-by-design processes using Python or Go.
Design and implement controls for containerized production environments.
Deploy and manage SAST, DAST, and SCA security testing tools.
Perform threat modeling, prioritize risks, and educate developers on secure coding practices.
Engage directly with customer security teams to resolve CVE exposure and architecture concerns.

United States citizenship and residence in the United States are required.
8+ years of experience in Information Security, including significant experience in Product Security or AppSec.
Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent experience.
Deep understanding of the FedRAMP authorization process, NIST 800-53, and the DoD Cloud Computing Security Requirements Guide.
Fluency in Python or Go for security automation.
Deep understanding of Linux containers, including internals and security isolation.
Familiarity with Kubernetes orchestration is strongly preferred.
Hands-on experience with Semgrep, Trivy, Burp Suite, or comparable security tools.
Ability to determine systemic causes of security issues and prevent recurrence.
Strong leadership, stakeholder-management, and diplomatic customer-communication skills.

Medical, dental, and vision insurance may be included depending on location and local legal requirements.
Flexible Time Off Program, paid holidays, paid parental leave, and a global Employee Assistance Program may be included depending on location and local legal requirements.

501-1,000 employees

DataRobot delivers the only agent workforce platform built for outcomes — not endless pilots.