Staff DevSecOps Engineer (Product Security)

Join Cloudera as a Staff DevSecOps Engineer, where you will play a crucial role in building and maintaining our internal security platform. You will work collaboratively with our Product Security Platform team, driving change at the design stage and providing consultation on leveraging the platform's capabilities. Your expertise in multi-cloud and on-prem security engineering will be instrumental in identifying product security pain points and solving them with scalable, platform-based solutions.

Do you want to lead the adoption of advanced DevSecOps practices, influence product design at the earliest stage, and get your hands dirty implementing sophisticated, highly automated security tooling for multi-cloud and on-prem environments? Great, we've got the position for you!

We’re looking for individuals who want to redefine how security is delivered in a high-velocity engineering organization

About Cloudera

Are you passionate about building a robust security platform that seamlessly integrates security into every phase of the software and infrastructure lifecycle?

Responsibilities

• Design, develop, and deploy self-service security tools and services that constitute the internal security platform.
• Lead complex security projects, including end-to-end ownership of tool development and the creation of new security capabilities within the platform.
• Automate and integrate security controls into CI/CD pipelines (SAST, DAST, SCA, IAST, etc.) and developer workflows.

Requirements

Bsc/Msc in related field or equivalent experience

• Proven experience designing, developing, and deploying security tools and services (e.g., security scanners, secrets management, policy engines) used by other engineering & security teams
• Expertise in DevSecOps principles and practical experience implementing security controls in CI/CD pipelines (e.g., Jenkins, GitLab CI, GitHub Actions)
• Deep experience with large-scale cloud security engineering in AWS, Azure, and Google Cloud, including automated network provisioning and secure configuration management
• Experience with code review of one or more programming languages (Java, Python, Go, JS/TS)
• In-depth knowledge of Kubernetes operations, security, and using tools like Helm for deployment and policy enforcement
• Demonstrated experience with security tools and platforms, including HashiCorp Vault for secrets management, Splunk for security monitoring and analytics, and CrowdStrike or similar EDR solutions for endpoint security.
• Deep understanding of web service frameworks, distributed architectures (event-driven, microservices, serverless), and their corresponding security challenges
• Experience performing security reviews, developing and reviewing threat models, and conducting risk assessments against complex distributed systems
• Security certifications (CISSP, CISA, etc.) are a bonus but not required

Preferred

• Expertise in Infrastructure as Code (IaC) & configuration management tools like Terraform, Cloudformation, or Ansible
• Familiarity with Cloudera’s products or other distributed computing systems is a strong bonus, or a willingness to dig into our products to truly understand how they work