Staff Security Engineer, Aerospike
$200-220k
Office located in Mountain View, CA
Real-time big data platform for organizations
Open for applications
Real-time big data platform for organizations
201-500 employees
Open for applications
$200-220k
Office located in Mountain View, CA
201-500 employees
Company mission
Aerospike's mission is to unleash the power of the world's real-time data.
Role
Who you are
- Education: Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field (or equivalent work experience)
- Experience: Minimum 7-10 years of experience in DevSecOps, DevOps, or Security Engineering roles, with a strong understanding of cloud security (AWS, Azure, GCP)
- Certifications (Preferred): CISSP, CEH or other relevant security certifications
- Soft Skills: Excellent written and verbal communication skills, ability to lead without authority, strong problem solving skills, and with a proactive mindset
- Familiarity with DevSecOps practices and tools
- Technical Skills:
- Hands-on experience with CI/CD tools (e.g., GitHub Actions, GitLab CI, CircleCI) and configuration management tools (e.g., Ansible, Chef, Puppet)
- Strong understanding of security principles and compliance standards (e.g., OWASP, CIS Benchmarks, NIST, ISO, SOC, GDPR, Schrems)
- Knowledge of container security (e.g., Docker, Kubernetes), serverless architectures, and microservices
- Proficiency in scripting and programming languages (e.g. Python, Go, Bash)
- Proficiency in IAC tools and use (e.g. Terraform, Pulumi)
- Knowledge of major public clouds and demonstrable proficiency in at least one (GCP, AWS, Azure)
What the job involves
- As a Staff Security Engineer, you will be a pivotal part of our security team, bridging the gap between business requirements and technical implementation
- You will collect and communicate business needs to the engineering team and provide the necessary tools and methodologies to ensure these needs are met securely and efficiently
- Security Integration: Implement and maintain security standards, automation, and processes within the CI/CD pipelines to enable secure code deployments and infrastructure management in a non-disruptive manner for our engineers
- Threat Modeling & Vulnerability Management: Identify and prioritize potential threats, vulnerabilities, and risks in the software development lifecycle. Design and implement security solutions to address these gaps
- Infrastructure as Code (IaC): Define and enforce secure configurations for cloud and on-premises environments using IaC tools (e.g., Terraform, CloudFormation, etc.)
- Security Automation: Develop and implement security guardrails, automated testing, and monitoring frameworks for continuous validation of security controls
- Incident Response & Mitigation: Act as the primary escalation point for security incidents, performing root cause analysis and driving remediation efforts
- Mentorship & Leadership: Guide and mentor junior engineers and advocate for secure coding, DevSecOps culture, and best practices across the organization
- Documentation & Reporting: Create and maintain comprehensive security documentation, metrics, and reports to communicate security posture and compliance status
- Requirement Gathering and Analysis:
- Collaborate with business stakeholders to understand and document their security requirements
- Translate business needs into technical specifications and security requirements for the engineering team
- Ensure that business needs are aligned with security best practices and regulatory requirements
- Communication and Collaboration:
- Serve as the primary liaison between business units and the engineering team
- Facilitate clear and effective communication of security requirements, risk assessments, and expectations
- Work closely with product managers, developers, and other stakeholders to integrate security into the software and product development lifecycle
- Tooling and Methodologies:
- Identify, evaluate, and implement security tools and technologies that address business needs
- Develop and maintain security guidelines, policies, and best practices for the engineering team
- Provide training and support to engineering teams on security tools and methodologies
- Security Architecture and Design:
- Participate in the design and architecture of secure systems and applications
- Conduct security assessments and threat modeling to identify potential risks
- Recommend and implement security controls and measures to mitigate identified risks
- Continuous Improvement:
- Stay current with emerging security trends, threats, and technologies
- Continuously improve security processes and methodologies
- Lead security-related initiatives and projects to enhance the organization's security posture
Our take
Aerospike is a high speed data platform that promises to reduce server footprints by up to 80%. Aimed at satisfying large-scale data platform requirements, clients include PayPal, Verizon Media, European Central Bank, and Snap Inc.
While there are other data platforms available such as DataStax, Redis Labs and Couchbase, Aerospike sets itself apart through offering no trade off between cost and a high level of performance and consistency on a large scale.
As massive petabyte data sets become the norm for large businesses, Aerospike realises the need for systems that can handle this in real-time. Its release of Aerospike Connect brings connectivity of Aerospike Database 5 with a range of big-name open-source frameworks such Apache Spark, Presto, Pulsar, Kafka and JMS - making Aerospike products more useful to a wider client set. Impressive Series E funding awarded in 2024 will be used to further develop its AI capabilities, specifically around graph and vector functions, capitalising on the current boom in the machine learning sector.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Apr 2024
$109m
SERIES E
Nov 2019
$32m
SERIES D
Total funding: $171m
Company benefits
- Comprehensive health plans & FSAs
- Healthy in-office snacks
- 401(k)
- Unlimited PTO
- Well-equipped workspace with standing desks, high-quality equipment and a fully stocked kitchen
- Weekly happy hours and regular company events
- Global team - you have the chance to connect with an international community and gain a global perspective
Company values
- Customer First - Always
- Integrity - Do What's Right
- Accountability - To each other, our customers, and partners
- Be Bold - Innovative, Be creative
- Empathy - Embrace differences, be humble
- Transparency - Engage authentically
- Collaboration - Debate and commit
- Results Focused - Get it done
Company HQ
Mountain View, CA
Articles
Leadership
Srini Srinivasan
(CTO)Worked as an IBM Senior Engineer for 4 years before working as a Server Architect at VerdiSoft and Yahoo!. They left their CTO role at Citrusleaf in 2009 to found Aerospike, serving as CPO since 2019.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 3 more jobs at Aerospike