Senior Software Development Engineer

Fortinet•Santa Clara, CA

2d•$150,000 - $183,000

About The Position

Own FortiCNAPP's composite alerts pipeline — a Python/Spark system that turns thousands of raw security detections into high-confidence intrusion narratives with entity graphs and timelines. You'll be the sole long-term owner of a mature, 5-year-old system, inheriting it from a departed founding engineer with structured onboarding support.

Requirements

6+ years building production data/backend systems in Python
Production-grade Apache Spark experience (debugging OOMs, skew, partitioning)
Strong SQL and warehouse/lakehouse experience with cost awareness
Experience owning a cross-team data schema (Protobuf, Avro, Thrift, etc.)
Kubernetes operations experience (scheduled jobs, rollouts, config management)
Track record safely retiring legacy systems (parity testing, kill switches)
Genuine interest in security detection logic
Comfortable inheriting an under-documented system solo
Must be authorized to work in the U.S. without sponsorship.

Nice To Haves

Graph databases (Neo4j/Cypher)
open table formats (Iceberg/Delta/Hudi)
cloud security/detection background (AWS/GCP/Azure audit logs, K8s audit events, MITRE ATT&CK)
Go
prior experience as a sole service owner.

Responsibilities

Own the aggregation engine and the alert/entity/evidence schema shared across teams
Complete the migration from a cloud data warehouse to an open-table-format lakehouse
Reduce infrastructure cost (Spark efficiency, warehouse sizing, scheduling)
Fix alert-quality issues: incomplete graphs, duplicate alerts, mismatched threat tags
Manage production operations on Kubernetes: deployment, rollout, on-call.