Senior Product Security Engineer, Collibra
Data intelligence cloud
Open for applications
Data intelligence cloud
1001+ employees
Open for applications
1001+ employees
Company mission
To change how organizations use data, so that they can change the world.
Role
Who you are
- 5+ years of relevant Penetration Testing, Product Security, and Application Security experience
- 2+ years securing Java, Python, and/or JavaScript web applications
- Experience with advanced security tools and techniques for simulating real-world attacks
- Familiarity with Open-Source Security Testing Methodology Manual (OSSTMM), Open Web Application Security Project (OWASP), Software Assurance Maturity Model (SAMM), National Institute of Standards and Technology (NIST) Special Publications, and PTES (Penetration Testing Execution Standard)
- Experience testing against compliance frameworks such as PCI, FISMA, HIPAA, FedRAMP, or HITRUST
- Strong working knowledge of at least two programming or scripting languages
- Familiarity with best practices for securing the SDLC and DevOps processes
- Ability to triage security incidents when needed
- Experience with AI security tooling and context-aware SSDLC automation
- Understanding of AI privacy and governance in developer workflows
- Experience using and building collaborative agentic AI systems
- Demonstrated proficiency in leveraging AI tools (e.g., Claude, Gemini, ChatGPT, Copilot) to solve real-world business challenges, drive measurable outcomes, or streamline workflows
- A Bachelor’s degree or equivalent certification and experience
- You are grounded in security principles, policies, and industry best practices
- An excellent verbal and written communicator, able to produce assessment reports, presentations, and operating procedures
- A developing or established leader who matures security practices and mentors junior teammates
- An advocate for the remediation of application security risk and, simultaneously, the associated development/engineering teams
What the job involves
- Collibra is seeking a Senior Product Security Engineer to join our high-impact team. You will be a key individual responsible for identifying vulnerabilities and providing expert remediation consulting for our global product development teams
- This role provides critical technical leadership and oversight, ensuring Collibra continues to deliver secure, resilient products and services to our customers
- You will act as an application security evangelist, partnering with engineers to accelerate secure time-to-value while leveraging cutting-edge AI and MCP to create context-aware security automation
- Product Security Engineers at Collibra are responsible for:
- Application Penetration Testing (Web-app, API,Thick Client)
- Network Penetration Testing (Internal, External)
- Cloud Service penetration testing tradecraft and methodologies across multiple service providers (AWS, Azure, GCP)
- Threat Modeling
- Source-Code Reviews
- Ensure quality reports and services are delivered efficiently and on time
- Collaborate with cross-functional teams to ensure that security best practices are integrated into the development process
- Enable remediation of discovered vulnerabilities through the building of relationships with engineering teams
- Continue to develop professional skills with relevant industry specific certifications or training
- Assist with triaging Code Security findings identified by SAST, SCA, IAST, DAST, where necessary
- Leverage AI and MCP to create intelligent, context-aware security guidance and automation
- Measures of success:
- Within your first month, you will build foundational knowledge of Collibra’s processes, tools, and SDLC. You will use that knowledge to design and implement repeatable penetration-testing methodologies tailored to the environment
- Within your first three months, you will independently plan and execute penetration-testing engagements, then partner with development teams to understand, prioritize, and remediate identified security issues
- Within your first six months, you will partner with your leader to develop a security roadmap for comprehensive, proactive assessments across Collibra. You will incorporate threat intelligence to anticipate emerging threats and identify potential security gaps
Our take
Collibra wants to help firms understand data governance. As companies gather ever more data, Collibra helps them understand what data they have, who has access to it and how to move it through a workflow of data analysis tools.
Historically, large corporations have not thought much about the data they collect and how to use it. In this day and age, however, data is super valuable, so everyone wants to make the most of it, which has made businesses turn to products such as Collibra's. The company has secured many big-name clients, including T-Mobile, Lloyds Banking, and Equifax.
The company's growth has been helped by increasing data privacy legislation like GDPR, which means companies have a legal obligation to be in control of the data they're collecting and giving their employees access to. In 2022, the company was named an Innovation Summit Honoree by the Bank of America’s annual Technology Innovation Summit. It has continued to add new features and integrations to maintain its offering's premium status, including a new data marketplace, which provides a shopping-like experience from which users can access a company’s internal datasets.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 8 rounds)
Nov 2021
$250m
SERIES G
Apr 2020
$112.5m
SERIES F
Total funding: $604.6m
Company benefits
- {Be}Healthy: Healthcare for yourself and eligible dependents (inclusive of partners/domestic partners), mental health resources and care, tax-advantaged accounts, income protection, discount programs and more! Additionally, we encourage employees to treat their whole self by offering a bi-monthly calendar of events and programming dedicated to our {Be}well initiatives which focus on wellbeing areas including emotional, professional & social, financial, physical, allyship & belonging and giving back.
- {Be}With Family: We offer multiple types of leave so that you can spend time with loved ones, including parental leave, caregiver leave and our annual family day. These are all complementary to our culture in which we value output over hours.
- {Be}Kind: Collibra For Good, Unconscious Bias & Allyship training, Manager Racial Injustice training and Collibra-led fundraisers.
- {Be}Unplugged: Our paid time off programs include vacation, holidays, sick time and compassionate/bereavement leave. We also offer remote-friendly meditation sessions and cooking lessons – all of which you’re actively encouraged to use!
- {Be}Informed: Competitive compensation, bonus potential, private company equity, merit reviews and promotion cycles, company pension, discounts programs, access to LinkedIn Learning, employee referral program, employee rewards & recognition, development programs and more!
- {Be}Together: Community and belonging with our Employee Resource Groups (ERGs) and personal interest groups, ERG-driven events, speaker series, and celebrations, a dedicated DEI council, the virtual Collibra cafe, trivia, bingo games and much more.
- When in-person (office) life resumes, we look forward to more snacks, catered lunches, team offsites and social events (think holiday gift exchange, fundraising events, happy hours, celebrations and more)!
- Unlimited paid time off policy
- Work from home opportunities
Company HQ
Financial District, New York, NY
Leadership
Felix Van De Maele
(Co-Founder & CEO)Previously studied Computer Science and founded Collibra straight after university.
Pieter De Leenheer
(Co-Founder)CTO at 1upHealth. Started Collibra after completing a PhD in Computer Science. Also held the post of Professor of Computer Science at VU Amsterdam. Board Observer at Zenoptics.
Share this job
View 19 more jobs at Collibra