Senior Software Engineer - Security
Business Area: Engineering Seniority Level: Mid-Senior level Job Description: At Cloudera, we empower people to transform complex data into clear and actionable insights. With as much data under management as the hyperscalers, we're the preferred data partner for the top companies in almost every industry. Powered by the relentless innovation of the open source community, Cloudera advances digital transformation for the world’s largest enterprises. Ready to take cloud innovation to the next level? Join Cloudera’s Anywhere Cloud team and help deliver a true “build your own pipeline, bring your own engine” experience — enabling data and AI workloads to run anywhere, without friction or vendor lock-in. We bring the best of public cloud — cost efficiency, scalability, elasticity, and agility — to wherever data lives: public clouds, private data centers, and the edge. Powered by Kubernetes, our hybrid architecture separates compute and storage to maximize flexibility and optimize infrastructure usage. We are looking for a Senior Security Engineer to join the AWC team. In this role, you will take ownership of security engineering for critical components of our platform. You will work independently to research, design, and implement security features while providing expertise to the broader engineering organization. As a Senior Software Engineer, you will: Independently research, design, and implement new security features and framework changes for the AWC platform. Perform threat modeling, risk assessments, and vulnerability detection/analysis on applications and related libraries. Write and review secure code (Go/Rust/Java), ensuring adherence to security standards. Work with multiple teams on application architecture, providing expert advice to developers and support to field teams regarding security issues. Mentor junior engineers and participate in the hiring process (interviewing) to help grow the team. Research industry developments and evolving threats to continuously harden the platform. We’re excited about you if you have: Bachelor’s degree with 5+ years of experience, Master’s with 3+ years in software or security engineering. 5+ years of programming experience with Java/Go/Rust Deep familiarity with security topics including PKI, TLS, LDAP, JWT, OIDC, SAML, and cryptography including symmetric/asymmetric encryption, digital signatures, and hashing . Familiarity with security standards such as FIPS 140-3, FedRAMP, OWASP, etc. a plus. Proven experience identifying and mitigating security vulnerabilities (CVE analysis, etc.). Familiarity with OWASP Top 10 risks and mitigations. Experience building and securing large, web-scale distributed systems. Familiarity with containerized microservices architectures including Kubernetes. Ability to work under general direction, independently determine approaches to solutions, and proactively raise issues. You May Also Have: Experience contributing to open source communities (GitHub commits, CVE submissions, blogs). Experience with containerization and orchestration (Kubernetes) in a cloud environment. What you can expect from us: Generous PTO Policy Support work life balance with Unplugged Days Flexible WFH Policy Mental & Physical Wellness programs Phone and Internet Reimbursement program Access to Continued Career Development Comprehensive Benefits and Competitive Packages Paid Volunteer Time Employee Resource Groups EEO/VEVRAA #LI-SV1