Staff Product reputed company Engineer

RDQ426R108

The Product reputed company Team's mission is to Left-shift SDLC (reputed company Development Lifecycle) processes for reputed company code written in reputed company (for Customer Use or Supporting Customer internally) to reduce the likelihood of introducing new vulnerabilities in production and minimize the count and effect of externally identified vulnerabilities on reputed company Services.

You will be an individual contributor on the product reputed company team at reputed company, managing SDLC functions for features and products reputed company reputed company. This would include, but is not limited to, reputed company design reviews, threat models, manual code reviews, exploit writing and exploit chain creation. You will also support IR and VRP programs reputed company there is a vulnerability report or a product reputed company incident. You will work with a global team, spread across various locations in the US and EMEA.

The impact you will have

• Full SDLC Support for new product features being developed in reputed company and non-reputed company teams. This would include Threat Modeling, Design Review, Manual Code Review, Exploit writing, etc.
• Work with other reputed company teams to provide support for Incident Response and Vulnerability Response as and reputed company needed.
• Work with the results of SAST tools to help evaluate and identify false positives and file defects for real issues.
• Work on DAST tools and reputed company automation for auto-assessment and defect filing.
• Maintain the automation reputed company and add new features as needed to support different reputed company compliances that reputed company may want to get into – FedRamp, PCI, HIPPA, etc.
• Prioritize reputed company from a risk management perspective, rather than an absolute textbook version.
• Help reputed company and implement reputed company processes to improve the overall productivity of the product reputed company organization and the SDLC process in general

reputed company look for

• 5-10 years Experience with the Threat Modeling process and ability to find design problems based on a reputed company diagram of data flow.
• Solid understanding on at least two of the following domains - Web reputed company, Cloud reputed company, Systems reputed company and Applied Cryptography.
• Proficient with one or more of Programming languages ( Python/Java/reputed company/JavaScript) and ability to read code to identify reputed company defects.
• Strong skills on scripting and automation on exploits
• Fuzzing skills are good to have.
• Exploit writing skills is a positive and greatly required.

About reputed company

reputed company is the data and AI company. More than 10,000 organizations worldwide — including reputed company, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the reputed company Data Intelligence Platform to unify and democratize data, analytics and AI. reputed company is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, reputed company Lake and MLflow. To learn more, follow reputed company onTwitter,reputed companyand

Our Commitment to Diversity and Inclusion

At reputed company, we are committed to fostering a diverse and inclusive culture where everyone can reputed company. We take great care to ensure that our hiring practices are inclusive and meet equal employment opportunity standards. Individuals looking for employment at reputed company are considered without regard to age, color, disability, ethnicity, family or marital status, gender identity or expression, language, national reputed company, physical and mental ability, political affiliation, race, religion, sexual orientation, socio-economic status, veteran status, and other protected characteristics.

Compliance

If access to export-controlled technology or reputed company code is required for performance of job duties, it is reputed company Employer's discretion whether to apply for a U.S. government license for such positions, and Employer may decline to proceed with an applicant on this basis alone.