Founded in 2014 by engineers from Google, Facebook and Oracle, Rubrik has created a cloud data management platform that’s transforming how company’s backup, restore, search, analyze and manage data both on-prem and in the cloud. Blending expertise from consumer and enterprise worlds, we’ve introduced a new, simple approach to the $48 billion legacy data backup and recovery market -- a space that hasn’t seen innovation in 20+ years. This is the reason Rubrik has raised over $292 million in funding from Silicon Valley’s top VCs and is growing faster than Arista Networks, Palo Alto Networks and Workday combined. At only five years old, we’re just getting started and have very ambitious goals.

Where can you make an impact?

Rubrik is seeking a Product Security Engineer. In this role, you will help mature our product security initiatives to drive security outcomes in the development process. You will partner with internal stakeholders and implement modern security processes and technologies to further integrate security into the development lifecycle.

 

Responsibilities:

Partner with engineering teams across rubrik to create secure cloud infrastructure design and deployment architectures utilizing threat models and risk analysis documentation Define policies across the organization for secure cloud design models within hybrid and public cloud environments Work with development teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting and governance to adhere to those standards Support incident responders in analyzing applicable threats, vulnerabilities, controls and residual risks Analyze and harden existing applications, infrastructure, automation, and deployment processes Coordinate with security researcher community for submitted vulnerabilities and issues and remediation of threats in both hybrid and public cloud environments

Ideal Background:

Bachelor’s degree required; BS or MS in Computer Science, Information Technology, or a related field 6+ years’ experience in cloud security, with experience across AWS, GCP and/or Azure infrastructure design 2+ years experience in VMWare and/or Network security modeling Broad knowledge of private and public cloud attack vectors and exploits Subject matter expertise in CI/CD, Cloud APIs and Identity management Deep understanding of compute, network and storage technologies in AWS, GCP and/or Azure Programming experience in Python, Go or Java Deep security subject matter expertise in at least one major public cloud provider (AWS, GCP, Azure)  Experience with deploying and securing SaaS applications and cloud environments at scale Working experience with CI/CD pipeline, containerization (Kubernetes, Docker, etc) and MicroServices Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc. Understanding of cloud security maturity model frameworks and how to apply them Strong written and verbal communication skills

#LI-MG1

Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.  Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. EEO IS THE LAW EEO IS THE LAW - POSTER SUPPLEMENT PAY TRANSPARENCY NONDISCRIMINATION PROVISION NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS