Lead Product Security Engineer

Be Part of Building the Future

Dremio is The Easy and Open Data Lakehouse, providing self-service analytics with data warehouse functionality and data lake flexibility across all of your data. Dremio increases agility with a revolutionary data-as-code approach that adopts Git concepts to enable data experimentation, version control, and governance. In addition, Dremio breaks down data silos by simplifying ingestion into the lakehouse, and also allowing queries directly on databases and data warehouses. All of this is available through a fully managed service that not only eliminates the need to maintain infrastructure and software, but also automatically optimizes the data in the lakehouse to maximize performance for every workload.

Founded in 2015, Dremio is headquartered in Santa Clara, CA. Investors include Cisco Investments, Insight Partners, Lightspeed Venture Partners, Norwest Venture Partners, Redpoint Ventures, and Sapphire Ventures. For more information, visit www.dremio.com. Connect with Dremio on GitHub, LinkedIn, Twitter, and Facebook.

If you, like us, say “bring it on” to exciting challenges that really do change the world, we have endless opportunities where you can make your mark.

About the role

As a Product Security Engineer you’ll be responsible for the security of the infrastructure and the code running on the Dremio systems. You will be one of the first Product Security hires and will be reporting to the Head of Security. 

What you’ll be doing

• Review the security impact for major product initiatives
• Lead projects to reduce product security risks, contribute to the architecture and design of Dremio products
• Provide security guidance to the Engineering and Product teams
• Identify, triage and minimize the security vulnerabilities in Dremio Products
• Tackle modern CI/CD pipeline security automation challenges
• Perform internal penetration tests and pour the foundations for a future red team

What we’re looking for

• B.S. or M.S in Computer Science or a related technical field or equivalent practical experience
• 5+ years of cybersecurity experience preferably in the product security/application security field
• Experience on evaluating, implementing and supporting security tools and processes
• Strong written/oral communication skills

Bonus points if you have

• Familiarity with cloud deployments, cloud architecture, cloud security, large scale web applications and backend services, multi cloud applications
• Familiarity with agile methodology and sprint planning
• Curious mindset.
• Experience on SDL proces

What we offer

• Medical, dental and vision insurance 
• 401(k) Plan
• Short term / long term disability and life insurance
• Pre-IPO stock options
• Flexible PTO
• 16 hours of volunteer time off
• 12 company paid holidays, including Juneteenth
• Remote work options
• Paid parental leave
• Employee Assistance Program (EAP)
• Biannual swag surprise

**Certain benefits are only allowed to full-time Dremio employees and may not be the same across all locations.

The base salary range for this position is $175,376 to $250,411 per year. The base salary actually offered to a successful candidate will take into account various relevant and non-discriminatory business factors including, without limitation, the candidate’s geographic location, job-related experience, knowledge, and skills, and education, as well as internal e