Product Security Engineer, Splunk

CA$80-110k

+ Incentive compensation

Docker

Kubernetes

JavaScript

Python

GraphQL

Java

Senior level

Remote from Canada

Data security & observability platform

Job no longer available

Data security & observability platform

1001+ employees

B2BArtificial IntelligenceDeep TechAnalyticsInternet of ThingsMachine LearningSaaSCyber Security

Job no longer available

CA$80-110k

+ Incentive compensation

Docker

Kubernetes

JavaScript

Python

GraphQL

Java

Senior level

Remote from Canada

1001+ employees

B2BArtificial IntelligenceDeep TechAnalyticsInternet of ThingsMachine LearningSaaSCyber Security

Company mission

To allow clients to focus on the business outcomes that data can deliver by helping organisations use their data to answer questions, take actions, and achieve business objectives

Job

Company

Role

Who you are

5+ years of experience in a security engineer capacity
Bachelor's degree in computer science, or equivalent degree
Software Development Experience: Must have developed production code in at least 2 programming languages, e.g. Java, Javascript, Python
In-depth knowledge of common application & network protocols, cryptographic technologies, authentication & authorization protocols, common security threats, such as attack-techniques, evasive techniques, and preventative & defensive methods
Experience with authentication and authorization protocols like OAuth, OIDC, SAML
Understanding of security features in Container and Container Orchestration technologies (Docker, Kubernetes, etc)
Deep knowledge of cloud operational models and secure SaaS architecture in a world of containerized microservices
Deep understanding of browser security and JavaScript frameworks
Understanding of web technologies: React+Redux, GraphQL, Web-Sockets, etc
Knowledge of compliance requirements for certifications like PCI DSS, SOC2, HIPAA, FedRAMP
Experience addressing systemic issues through root cause analysis, building security solutions, and project leadership
Ability to provide pragmatic security advice for web applications, mobile applications, hybrid Cloud software
In depth knowledge on the best remediation techniques for different application vulnerabilities and the ability to explain them to product teams

What the job involves

As a product security engineer you will lead security and vulnerability assessments in collaboration with the product team to assure the secure release of Splunk products
This role will report to the Senior Manager, of Product Security
Perform threat modeling and act as a point of contact for the product team to discover insecure design patterns and threats in Splunk’s products
Perform vulnerability assessment for SAST, DAST and SCA findings and lead the teams towards remediation
Support the product team through providing security consultation services and becoming a subject matter expert for your assigned products
Perform Threat Modeling, security design review of distributed systems, APIs, and hybrid Cloud solutions
Develops and owns high complexity security automation tools, and CICD integration, familiar with revision control systems git, svn), merge request and deployment of artifact/libraries
Leads security design discussions, threat assessments, proposes and discusses solutions to security tools, CICD pipeline changes and pen testing that are directly related to their area of focus
Comfortably leads a security tool design & implementation and is recognized as the go-to security engineer for his area

Our take

Splunk was founded to produce software for searching and analysing machine-generated data for clients. The platform provides live data insights and is an attractive option due to its flexibility, scalability and ability to process real time data.

The company has evolved significantly since being founded, implementing developments in augmented reality, machine learning and mobile technology. Further, the company's transition to the cloud has allowed it to provide new offerings, and proved its ability to move with market trends.

Acquired by Cisco in 2024, Splunk now benefits from Cisco's user protection, breach protection and threat intelligence capabilities. The company will continue to deliver its security products, and also has plans to enhance its portfolio moving forwards.

Kirsty

Company Specialist at Welcome to the Jungle

Company

Funding (last 2 of 3 rounds)

Sep 2007

$25m

SERIES C

Jan 2006

$10m

SERIES B

Total funding: $40m

Company HQ

South Beach, San Francisco, CA

Leadership

Gary Steele

(EVP & GM of Splunk at Cisco, not founder)

Was CEO and President of Splunk before it became a Cisco company. Previously CEO at Proofpoint and Portera, VP at Sybase, and Market Development Manager at Sun Microsystems.

Share this job