Apply on Employer Site

DataRobot · 6 hours ago

Staff Product Security Engineer

United States

Full-time

Remote

Lead/Staff

8+ years exp

DataRobot delivers AI that maximizes impact and minimizes business risk. They are seeking an experienced Staff Product Security Engineer to drive security innovation while ensuring their platform meets the rigorous demands of Federal and Commercial customers.

AI InfrastructureEnterprise SoftwareMachine Learning

No H1B

U.S. Citizen Only

Responsibilities

Lead Federal Security: Serve as a primary technical lead for the DataRobot Federal Group, driving the acquisition and maintenance of Authority to Operate (ATO) at FedRAMP High and DoD IL5 levels

Compliance Engineering: Translate complex federal controls (NIST 800-53) into actionable engineering requirements for commercial developers

Audit & Policy Management: Write and maintain security policies (SSPs) and procedures. Develop, track, and remediate Plans of Action and Milestones (POA&Ms) and provide technical evidence during third-party audits

Automate Everything: Develop custom automation to manage security tooling and implement "Secure-by-Design" processes in the CI/CD pipeline using Python or Go

Container Security: Identify, design, and implement controls to safeguard our containerized production environments

Tooling Management: Deploy and manage security testing tools for SAST, DAST, and SCA analysis (e.g., Semgrep, Trivy, Burp Suite)

Threat Modeling: Review technical designs for new features, performing threat models to prioritize risks and educate developer teams on secure coding practices

Customer Engagement: Act as the external face of DataRobot Security. Work directly with customers' security teams to resolve concerns regarding CVE exposure and architecture

Customer-Centric Communication: Balance business needs with security rigor. You must be able to stand firm on security policies while maintaining strong professional relationships through clear, diplomatic, and solutions-oriented communication

Qualification

Federal ComplianceSecurity AutomationPythonGoNIST 800-53Linux ContainersKubernetesSecurity ToolsCustomer EngagementDiplomatic CommunicationLeadership Skills