Staff DevSecOps Engineer - Product Security

Cloudera•Austin, TX

19d•Hybrid

About The Position

Cloudera is seeking a Staff DevSecOps Engineer to join its Product Security Platform team. The team engineers, deploys, maintains, and operationalizes an internal security platform that provides self-service tools to help product teams build and deploy securely by default. This role contributes to product security development by influencing design through automated governance and advising teams on use of the platform. The engineer will build scalable platform-based solutions that reduce security toil and help embed security by design across Cloudera’s products. The position involves leading security projects and developing automated tools and controls for multi-cloud and on-prem environments, while collaborating with product engineering, Site Reliability Engineering, and internal security teams. The role also includes driving adoption of security engineering practices, providing training, and mentoring junior security team members and security advocates.

Requirements

BSc/MSc in a related field or equivalent experience.
Proven experience designing, developing, and deploying security tools and services used by engineering or security teams, such as security scanners, secrets management, or policy engines.
Expertise in DevSecOps principles and practical experience implementing security controls in CI/CD pipelines, such as Jenkins, GitLab CI, or GitHub Actions.
Deep experience with large-scale cloud security engineering in AWS, Azure, and Google Cloud, including automated network provisioning and secure configuration management.
Experience reviewing code in one or more programming languages, such as Java, Python, Go, or JavaScript/TypeScript.
In-depth knowledge of Kubernetes operations and security, and experience using tools such as Helm for deployment and policy enforcement.
Expertise in Infrastructure as Code and configuration management tools such as Terraform, CloudFormation, or Ansible.
Experience with security tools and platforms, including HashiCorp Vault, Splunk, and CrowdStrike or similar EDR solutions.
Deep understanding of web service frameworks, distributed architectures—including event-driven systems, microservices, and serverless—and associated security challenges.
Experience performing security reviews, developing and reviewing threat models, and conducting risk assessments for complex distributed systems.

Nice To Haves

Security certifications such as CISSP or CISA.
Familiarity with Cloudera products or other distributed computing systems, or willingness to learn how Cloudera products work.

Responsibilities

Design, develop, and deploy self-service security tools and services for the internal security platform.
Lead complex security projects, owning tool development end to end and creating new platform capabilities.
Automate and integrate security controls into CI/CD pipelines and developer workflows, including SAST, DAST, SCA, and IAST.
Lead the architecture and deployment of secure multi-cloud environments using Infrastructure as Code.
Perform security architecture reviews of products and features, develop threat models, and provide security-as-code best practices.
Collaborate with the SRE team to embed and maintain automated monitoring and security visibility in production systems.
Collaborate with internal security teams on compliance, incident response, and operational security requirements.
Develop, refine, and promote security engineering best practices and standards across the organization.
Promote use of security platform tooling and deliver DevSecOps training and outreach to internal development and engineering teams.
Mentor junior Security team members and security advocates in DevSecOps, platform engineering, and secure coding.