Product Security Engineer, Couchbase
+ RSU equity + ESPP program
Operational data platform for AI
Job no longer available
Operational data platform for AI
501-1000 employees
Job no longer available
+ RSU equity + ESPP program
501-1000 employees
Company mission
To simplify how organizations develop, deploy, and run modern applications wherever they are.
Role
Who you are
- You are a software developer at heart with a strong passion for security
- Bachelors in Computer Science, Information Security, or a related field
- 3-5 years of experience focused in the areas of software engineering, application security, cloud security, and related disciplines
- Solid understanding of secure coding principles (e.g., OWASP Top10, OWASP SAMM) and Agile software development practices
- Familiarity with various software development & automation tools (e.g., GitHub, Jira, Jenkins, Qualys, SonarCube, Snyk, Sysdig, Veracode, Blackduck, etc.)
- A good understanding of threat modeling and how to mitigate application security risks
- Knowledge of vulnerability management including CVSS scoring and CVEs across open source and third-party software and supply chains
- Strong understanding of various types of cloud service models (IAAS, PAAS, SAAS). In addition, experience with security features in AWS, Azure, and GCP Infrastructure is desirable
- Good understanding of SSO, including OAUTH, SAML
- Database & Mobile security experience a plus
- Industry Certifications such as OSCP, CEH, CISSP, CISM, AWS Certified Security, Azure Security, Google Cloud Security Engineer are considered a plus
- Highly effective written and oral communication skills
- Strong project management skills and ability to work independently on engagements
What the job involves
- The Product/Application Security Engineer will be responsible for advocating secure SDLC and AI security practices
- You will be responsible for threat modeling and security testing to ensure the delivery of secure product releases
- You will evaluate application environments to ensure they are being designed and deployed in compliance with industry standards and best practices
- You will collaborate closely with Product Management, Engineering, SRE, Project Managers, and others, in determining and ensuring that security requirements for product releases are met as part of all phases of the secure software development lifecycle (SSDLC) process
- You will work with multiple engineering teams to standardize, implement, and enhance product security
- You will take an active role in training and spreading awareness to help build a security-first culture
- You will be responsible for supporting application security tool deployments and recommend improvements to the tools and processes established within our application security framework to increase efficiency and mature the program
- Perform security software architecture review and integrate threat modeling and abuse cases into the SDLC; Advise and implement secure software architecture patterns
- Drive the development and implementation of standard security review processes across the company that result in effective methods for reducing security risks before product releases
- Integrate application security tools within existing development, build, and deployment processes
- Conduct dynamic & static code scan reviews and run-time tests
- Assist with the planning and execution of application penetration tests
- Interface and collaborate with Engineering, Cloud, and SOC teams during security incidents
- Drive the remediation of security vulnerabilities in the products within defined SLAs
- Assist in completing RFP security questionnaires
Our take
Critical functions for digital businesses such as computing and storage have become cheaper by orders of magnitude with the advent of cloud computing. However, these businesses still face the challenge of architecting their services under this paradigm. Couchbase’s NoSQL database is designed to help organizations build scalable, distributed systems that take advantage of cloud-native infrastructure.
The company's major bets on Kubernetes, mobile and NoSQL have paid off too. With many large enterprises now treating Couchbase as mission-critical infrastructure, a trajectory that culminated because of ts 2021 IPO. While it operates in a highly competitive database market, the company has continued to grow post-IPO and is now positioning itself around the next shift in enterprise architecture: AI-native applications.
The recent launch of Couchbase AI Services reflects an effort to unify operational data, vector search and model hosting within a single platform, reducing the complexity that often prevents generative AI and agent-based systems from moving beyond proof-of-concept. By embedding governance, validation and security controls directly into the data layer, Couchbase is aiming to make its database a core foundation for production AI workloads.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
May 2020
$105m
SERIES G
Mar 2016
$30m
SERIES F
Total funding: $251m
Company HQ
Cypress, San Jose, CA
Leadership
BJ Schaknowski
(CEO)Prior to joining Couchbase in 2025, BJ was the CEO of symplr. He also served as the Chief Sales & Marketing Officer at Vertafore and as an SVP of Marketing, Sales & Services at LexisNexis Software Solutions.
Veronica Curran
(CPO)Veronica Previously founded Magnolia People Solutions where she served as a Managing Partner for nearly 2 years. Prior to that, she was the Chief People and culture Officer at SmartBear and the CPO at Alumni Ventures Group.
Gopi Duddi
(CTO)Gopi joined Couchbase in 2022 as an SVP of Engineering, moving into the role of CTO in 2025. Prior to this, he spent 10 years at Amazon AWS, joining in 2012 as a Senior Manager of Database Services before moving into the role of GM. He also spent 7 years at IBM In various Managerial roles.
Josh Harbert
(CMO)Josh is also the co-founder and President of SustainableIT.org. Previously, he served as the CMO at Delphix and the VP of Marketing at Tanium and Qumulo.
Amir Jafari
(CFO)Amir is also the CFO/Head of Finance & Operations at Blend. Previously, he served as the CFO at Plastiq and Reputation.com.
Share this job
View 3 more jobs at Couchbase