Product Security Engineer, Couchbase
+ RSU equity + ESPP program
Enterprise-class, multicloud to edge NoSQL database
Open for applications
Enterprise-class, multicloud to edge NoSQL database
501-1000 employees
Open for applications
+ RSU equity + ESPP program
501-1000 employees
Company mission
To simplify how organizations develop, deploy, and run modern applications wherever they are.
Role
Who you are
- You are a software developer at heart with a strong passion for security
- Bachelors in Computer Science, Information Security, or a related field
- 3-5 years of experience focused in the areas of software engineering, application security, cloud security, and related disciplines
- Solid understanding of secure coding principles (e.g., OWASP Top10, OWASP SAMM) and Agile software development practices
- Familiarity with various software development & automation tools (e.g., GitHub, Jira, Jenkins, Qualys, SonarCube, Snyk, Sysdig, Veracode, Blackduck, etc.)
- A good understanding of threat modeling and how to mitigate application security risks
- Knowledge of vulnerability management including CVSS scoring and CVEs across open source and third-party software and supply chains
- Strong understanding of various types of cloud service models (IAAS, PAAS, SAAS). In addition, experience with security features in AWS, Azure, and GCP Infrastructure is desirable
- Good understanding of SSO, including OAUTH, SAML
- Database & Mobile security experience a plus
- Industry Certifications such as OSCP, CEH, CISSP, CISM, AWS Certified Security, Azure Security, Google Cloud Security Engineer are considered a plus
- Highly effective written and oral communication skills
- Strong project management skills and ability to work independently on engagements
What the job involves
- The Product/Application Security Engineer will be responsible for advocating secure SDLC and AI security practices
- You will be responsible for threat modeling and security testing to ensure the delivery of secure product releases
- You will evaluate application environments to ensure they are being designed and deployed in compliance with industry standards and best practices
- You will collaborate closely with Product Management, Engineering, SRE, Project Managers, and others, in determining and ensuring that security requirements for product releases are met as part of all phases of the secure software development lifecycle (SSDLC) process
- You will work with multiple engineering teams to standardize, implement, and enhance product security
- You will take an active role in training and spreading awareness to help build a security-first culture
- You will be responsible for supporting application security tool deployments and recommend improvements to the tools and processes established within our application security framework to increase efficiency and mature the program
- Perform security software architecture review and integrate threat modeling and abuse cases into the SDLC; Advise and implement secure software architecture patterns
- Drive the development and implementation of standard security review processes across the company that result in effective methods for reducing security risks before product releases
- Integrate application security tools within existing development, build, and deployment processes
- Conduct dynamic & static code scan reviews and run-time tests
- Assist with the planning and execution of application penetration tests
- Interface and collaborate with Engineering, Cloud, and SOC teams during security incidents
- Drive the remediation of security vulnerabilities in the products within defined SLAs
- Assist in completing RFP security questionnaires
Our take
Critical functions for digital businesses such as computing and storage have become cheaper by orders of magnitude with the advent of cloud computing. However, these businesses still face the challenge of architecting their services under this paradigm. Couchbase’s NoSQL database makes taking advantage of these features possible.
The cloud vendor's major bets on Kubernetes, mobile, and of course, NoSQL have paid off. Many of the world’s largest companies have come to consider this software as mission-critical and Couchbase has benefitted from this as exemplified by its IPO in 2021.
The biggest challenge for Couchbase is that it is playing in a large but competitive market, with the likes of DataStax and the publically traded MongoDB, and all the major cloud vendors vying for similar customers in the NoSQL space. However, Couchbase continues to grow post-IPO and serves influential clients including Mariott International, Amadeus, and LinkedIn.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
May 2020
$105m
SERIES G
Mar 2016
$30m
SERIES F
Total funding: $251m
Company benefits
- Generous Time Off Program - Flexibility to care for you and your family
- Wellness Benefits - A variety of world class medical plans to choose from, along with dental, vision, life insurance, and employee assistance programs
- Financial Planning - RSU equity program, ESPP program, Retirement program and Business Travel Insurance
- Career Growth - Be valued, Create value approach
- Fun Perks - An ergonomic and comfortable in-office / WFH setup. Food & Snacks for in-office employees
- And much more!
Company HQ
Santa Clara, CA
Leadership
Matt Cain
(Chair, President & CEO)Previously spent 2 years at Veritas Technologies, initially as Executive Vice President before becoming President of Worldwide Field Operations. Prior to that, they were VP/Senior VP at Symantec and also spent 6 years at Cisco Systems in various roles, including Senior Director of Product Management and Business Development.
Share this job
View 16 more jobs at Couchbase