MENU
  • Remote Jobs
  • Companies
  • Go Premium
  • Job Alerts
  • Post a Job
  • Log in
  • Sign up
Working Nomads logo Working Nomads
  • Remote Jobs
  • Companies
  • Post Jobs
  • Go Premium
  • Get Free Job Alerts
  • Log in

Sr. Product Security Engineer

Databricks

Full-time
Germany
security
java
javascript
python
risk management
The job listing has expired. Unfortunately, the hiring company is no longer accepting new applications.

To see similar active jobs please follow this link: Remote Development jobs

RDQ324R8

While candidates in the listed location(s) are encouraged for this role, candidates in other locations will be considered.

The Product Security Team's mission is to Left-shift SDLC (Security Development Lifecycle) processes for ALL code written in Databricks (for Customer Use or Supporting Customer internally) to reduce the likelihood of introducing new vulnerabilities in production and minimize the count and effect of externally identified vulnerabilities on Databricks Services.

You will be an individual contributor on the product security team at Databricks, manage SDLC functions for features and products within Databricks. This would include, but is not limited to, security design reviews, threat models, manual code reviews, exploit writing and exploit chain creation. You will also support IR and VRP programs when there is a vulnerability report or a product security incident. You will work with a global team, spread across various locations in the US and EMEA.

The impact you will have: 

  • Full SDLC Support for new product features being developed in ENG and non-ENG teams. This would include Threat Modeling, Design Review, Manual Code Review, Exploit writing, etc.

  • Work with other security teams to provide support for Incident Response and Vulnerability Response as and when needed.

  • Work with the results of SAST tools to help evaluate and identify false positives and file defects for real issues.

  • Work on DAST tools and related automation for auto-assessment and defect filing.

  • Maintain the automation framework and add new features as needed to support different security compliances that Databricks may want to get into – FedRamp, PCI, HIPPA, etc.

  • Prioritize security from a risk management perspective, rather than an absolute textbook version.

  • Help develop and implement security processes to improve the overall productivity of the product security organization and the SDLC process in general

What we look for:

  • 3+ years of experience with the Threat Modeling process and ability to find design problems based on a block diagram of data flow.

  • Solid understanding on at least two of the following domains - Web Security, Cloud Security, Systems Security and Applied Cryptography.

  • 3+ years of experience with one or more of Python/Java/Scala/JavaScript and ability to read code to identify security defects.

  • Strong skills on scripting and automation on exploits

  • Fuzzing skills are good to have.

  • Exploit writing skills is a positive and greatly required.

Benefits 

  • Private medical insurance

  • Life, accident & disability insurance

  • Pension Plan

  • Vision Reimbursement

  • Equity awards

  • Enhanced Parental Leaves

  • Fitness reimbursement

  • Annual career development fund

  • Home office & work headphones reimbursement

  • Business travel accident insurance

  • Mental wellness resources

  • Employee referral bonus

About the job

Full-time
Germany
18 Applicants
Posted 1 year ago
security
java
javascript
python
risk management
Enhancv advertisement

30,000+
REMOTE JOBS

Unlock access to our database and
kickstart your remote career
Join Premium

Sr. Product Security Engineer

Databricks
The job listing has expired. Unfortunately, the hiring company is no longer accepting new applications.

To see similar active jobs please follow this link: Remote Development jobs

RDQ324R8

While candidates in the listed location(s) are encouraged for this role, candidates in other locations will be considered.

The Product Security Team's mission is to Left-shift SDLC (Security Development Lifecycle) processes for ALL code written in Databricks (for Customer Use or Supporting Customer internally) to reduce the likelihood of introducing new vulnerabilities in production and minimize the count and effect of externally identified vulnerabilities on Databricks Services.

You will be an individual contributor on the product security team at Databricks, manage SDLC functions for features and products within Databricks. This would include, but is not limited to, security design reviews, threat models, manual code reviews, exploit writing and exploit chain creation. You will also support IR and VRP programs when there is a vulnerability report or a product security incident. You will work with a global team, spread across various locations in the US and EMEA.

The impact you will have: 

  • Full SDLC Support for new product features being developed in ENG and non-ENG teams. This would include Threat Modeling, Design Review, Manual Code Review, Exploit writing, etc.

  • Work with other security teams to provide support for Incident Response and Vulnerability Response as and when needed.

  • Work with the results of SAST tools to help evaluate and identify false positives and file defects for real issues.

  • Work on DAST tools and related automation for auto-assessment and defect filing.

  • Maintain the automation framework and add new features as needed to support different security compliances that Databricks may want to get into – FedRamp, PCI, HIPPA, etc.

  • Prioritize security from a risk management perspective, rather than an absolute textbook version.

  • Help develop and implement security processes to improve the overall productivity of the product security organization and the SDLC process in general

What we look for:

  • 3+ years of experience with the Threat Modeling process and ability to find design problems based on a block diagram of data flow.

  • Solid understanding on at least two of the following domains - Web Security, Cloud Security, Systems Security and Applied Cryptography.

  • 3+ years of experience with one or more of Python/Java/Scala/JavaScript and ability to read code to identify security defects.

  • Strong skills on scripting and automation on exploits

  • Fuzzing skills are good to have.

  • Exploit writing skills is a positive and greatly required.

Benefits 

  • Private medical insurance

  • Life, accident & disability insurance

  • Pension Plan

  • Vision Reimbursement

  • Equity awards

  • Enhanced Parental Leaves

  • Fitness reimbursement

  • Annual career development fund

  • Home office & work headphones reimbursement

  • Business travel accident insurance

  • Mental wellness resources

  • Employee referral bonus

Working Nomads

Post Jobs
Premium Subscription
Sponsorship
Free Job Alerts

Job Skills
API
FAQ
Privacy policy
Terms and conditions
Contact us
About us

Jobs by Category

Remote Administration jobs
Remote Consulting jobs
Remote Customer Success jobs
Remote Development jobs
Remote Design jobs
Remote Education jobs
Remote Finance jobs
Remote Legal jobs
Remote Healthcare jobs
Remote Human Resources jobs
Remote Management jobs
Remote Marketing jobs
Remote Sales jobs
Remote System Administration jobs
Remote Writing jobs

Jobs by Position Type

Remote Full-time jobs
Remote Part-time jobs
Remote Contract jobs

Jobs by Region

Remote jobs Anywhere
Remote jobs North America
Remote jobs Latin America
Remote jobs Europe
Remote jobs Middle East
Remote jobs Africa
Remote jobs APAC

Jobs by Skill

Remote Accounting jobs
Remote Assistant jobs
Remote Copywriting jobs
Remote Cyber Security jobs
Remote Data Analyst jobs
Remote Data Entry jobs
Remote English jobs
Remote Spanish jobs
Remote Project Management jobs
Remote QA jobs
Remote SEO jobs

Jobs by Country

Remote jobs Australia
Remote jobs Argentina
Remote jobs Brazil
Remote jobs Canada
Remote jobs Colombia
Remote jobs France
Remote jobs Germany
Remote jobs Ireland
Remote jobs India
Remote jobs Japan
Remote jobs Mexico
Remote jobs Netherlands
Remote jobs New Zealand
Remote jobs Philippines
Remote jobs Poland
Remote jobs Portugal
Remote jobs Singapore
Remote jobs Spain
Remote jobs UK
Remote jobs USA


Working Nomads curates remote digital jobs from around the web.

© 2025 Working Nomads.