Staff Software Engineer - Product Security

Cloudera is a leading data partner for top companies across various industries, focusing on empowering people to transform complex data into actionable insights. The Staff Software Engineer - Product Security will serve as a technical architect, responsible for translating global security requirements into automated engineering solutions while leading initiatives to enhance the security posture of Cloudera's product suite.

Responsibilities:

• Architect and maintain advanced build tooling to automate and accelerate vulnerability remediation across all engineering pillars
• Lead Proof of Concepts (POCs) and evaluate third-party security tools to enhance our security posture without compromising developer velocity
• Design and develop core security features, including FIPS compliance, TLS/Encryption, Secrets Rotation, Identity & Access Management (IAM), and Certificate Management
• Drive root-cause analysis and triage for complex, product-wide stability issues related to security infrastructure
• Engineer specialized observability tools, such as encryption inventories, to audit and measure security standards during feature delivery
• Author comprehensive design specifications and test plans for cross-component security features, providing technical clarity in the face of ambiguity
• Elevate the team’s technical bar through high-quality code reviews, documentation standards, and active mentorship of engineering talent
• Partner across organizational lines, collaborating with internal stakeholders and senior management to resolve customer escalations and align with long-term objectives

Requirements:

• Bachelor's degree in Computer Science or a related field (or equivalent experience) with 6+ years of professional software engineering experience
• Deep technical expertise in containerized environments, specifically Kubernetes (EKS) and Docker
• Strong command of general-purpose and scripting languages, including Java, Python, Go, and Bash
• Proven experience with Infrastructure-as-Code (IaC) tools such as Terraform and Helm to automate secure infrastructure rollouts
• Expert-level experience automating complex CI/CD pipelines using platforms such as GitLab CI/CD, Jenkins, or GitHub Actions
• Exceptional troubleshooting skills with a track record of identifying root causes for site outages and resolving P1 escalations
• Experience with Post-Quantum Cryptography to support upcoming product transitions
• Practical experience with FIPS 140-3, TLS 1.3, and modern encryption standards
• Proven ability to automate CVE remediation and integrate SAST/DAST scanning tools—such as Trivy, Aquasec, Tenable, or Fortify—into developer workflows
• Familiarity with government compliance frameworks and industry standards including FedRAMP, ISO 27001, and SOC 2
• Deep understanding of secure coding practices and common vulnerabilities as outlined in the OWASP Top 10
• Experience working with Identity and Access Management (IAM) or Identity Governance platforms
• Strong management skills with a demonstrated ability to influence cross-functional teams and drive results in a remote environment