Staff Product Security Engineer, DataRobot
More information about location
Value-Driven AI for business
Be an early applicant
Value-Driven AI for business
501-1000 employees
Be an early applicant
More information about location
501-1000 employees
Company mission
To change the way businesses all over the world make their most important decisions.
Role
Who you are
- This role requires a unique blend of technical expertise, regulatory fluency, and diplomatic communication skills to navigate complex customer conversations
- Federal Fluency: Deep understanding of the FedRAMP authorization process, NIST 800-53, and DoD Cloud Computing Security Requirements Guide (SRG)
- Fluent in writing code using Python or Go to build security automation
- Must have a deep understanding of Linux containers (internals, security isolation)
- Familiarity with Kubernetes orchestration is strongly preferred
- Hands-on experience with common security tools such as Semgrep, Trivy, and Burp Suite
- Strategic Mindset: Experience determining not just how to fix a bug, but why it happened and how to prevent it systemically
- Soft Skills: Strong leadership skills for guiding teams and liaising with various stakeholders
- 8+ years of experience working in Information Security, with significant time spent in Product Security or AppSec roles
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Systems, or a related field (or equivalent experience)
What the job involves
- DataRobot delivers AI that maximizes impact and minimizes business risk
- Our platform and applications integrate into core business processes so teams can develop, deliver, and govern AI at scale
- DataRobot empowers practitioners to deliver predictive and generative AI, and enables leaders to secure their AI assets
- Organizations worldwide rely on DataRobot for AI that makes sense for their business — today and in the future
- DataRobot is seeking an experienced Staff Product Security Engineer to drive security innovation while ensuring our platform meets the rigorous demands of our Federal and Commercial customers
- This is a highly technical, high-impact role where you will operate at the intersection of engineering, automation, and federal compliance (FedRAMP High / DoD IL5)
- You will serve as a subject matter expert for our Federal group, handle high-stakes customer security inquiries, and build automation using Python and Go
- Lead Federal Security: Serve as a primary technical lead for the DataRobot Federal Group, driving the acquisition and maintenance of Authority to Operate (ATO) at FedRAMP High and DoD IL5 levels
- Compliance Engineering: Translate complex federal controls (NIST 800-53) into actionable engineering requirements for commercial developers
- Audit & Policy Management: Write and maintain security policies (SSPs) and procedures. Develop, track, and remediate Plans of Action and Milestones (POA&Ms) and provide technical evidence during third-party audits
- Automate Everything: Develop custom automation to manage security tooling and implement "Secure-by-Design" processes in the CI/CD pipeline using Python or Go
- Container Security: Identify, design, and implement controls to safeguard our containerized production environments
- Tooling Management: Deploy and manage security testing tools for SAST, DAST, and SCA analysis (e.g., Semgrep, Trivy, Burp Suite)
- Threat Modeling: Review technical designs for new features, performing threat models to prioritize risks and educate developer teams on secure coding practices
- Customer Engagement: Act as the external face of DataRobot Security. Work directly with customers' security teams to resolve concerns regarding CVE exposure and architecture
- Customer-Centric Communication: Balance business needs with security rigor. You must be able to stand firm on security policies while maintaining strong professional relationships through clear, diplomatic, and solutions-oriented communication
Our take
DataRobot is an enterprise AI platform that helps business analysts develop predictive analytics without requiring any knowledge of programming or machine learning. The platform uses machine learning to build and distribute accurate predictive models quickly by automating users' end-to-end journeys.
Unlike its competitors, such as Domino Data Lab, Captricity, and Datameer, DataRobot's primary selling point is its extensibility. Depending on the job function or comfort level users opt for, they have the option to take complete control of their workflow. Business analysts are free to use the platform as a wizard, but more experienced data scientists have the opportunity to alter many parameters in order to develop precise models.
DataRobot's customers have developed over 500 million models on the DataRobot Cloud on AWS after it earned Amazon Web Services (AWS) ML Competency status. By selling its AI toolkits to more than a third of the Fortune 50, including Kroger, Nationwide, and Lenovo, the company has continued to go from strength to strength and has been recognised as a leader in the space.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-35% employee growth in 12 months
Company
Funding (last 2 of 10 rounds)
Jun 2021
$300m
SERIES G
Dec 2020
$50m
SERIES F
Total funding: $1.1bn
Company benefits
- Medical, Dental & Vision Insurance
- Flexible Time Off Program
- Paid Holidays
- Paid Parental Leave
- Global Employee Assistance Program (EAP)
- Work from Home Opportunities
- A World-class Team
- Company Outings
- Open Door Policy
Company HQ
Financial District, Boston, MA
Leadership
Debanjan Saha
(CEO)Previously the VP of Data Analytics at Google and VP of managed database services at Amazon.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 3 more jobs at DataRobot