Senior Product Security Engineer II

About Us

Since 2016, dbt Labs has been on a mission to help analysts create and disseminate organizational knowledge. dbt Labs pioneered the practice of analytics engineering, built the primary tool in the analytics engineering toolbox, and has been fortunate enough to see a fantastic community coalesce to help push the boundaries of the analytics engineering workflow. Today there are 30,000 companies using dbt every week, 100,000 dbt Community members, and over 4,100 dbt Cloud customers. You can learn more about our values here.  

About the Security Team:

The mission of the Security Engineering team at dbt Labs is to provide clear, opinionated security guidance and scalable, secure-by-default offerings to engineers for the purpose of securing software development and enabling pragmatic risk decisions at dbt.

Our small team size and wide scope of responsibilities require that we work intelligently to address the security needs of dbt’s products. We aim to put yesterday’s problems behind us through a mix of OSS/COTS solutions for commodity problems and using ingenuity to solve the rest.

As an Senior Security Engineer II on this central team, you will have the opportunity to own outsized impact on how securely engineers at dbt are able to build software and infrastructure.

In this role, you can expect to:

• Write code:
  • Research, plan, and build solutions to solve security problems at scale.
  • Build and deploy automation tools for security monitoring; vulnerability detection, prevention, and remediation; risk assessment and prioritization; and incident response.
• Be an empathetic partner to Engineering teams:
  • Partner with cross-functional engineering teams to help them understand and prioritize their biggest security risks.
  • Eliminate classes of security problems by building paved paths for engineers to follow.
  • Perform security architecture reviews and threat models early in the design process to help teams build systems that are secure by design.
• Be a leader:
  • Identify new opportunities for improved security posture across the organization and lead those efforts to success.
  • Provide security mentorship to security, software, and infrastructure engineers via 1:1 mentoring, demos, and org-wide security training.
  • Play an influential role in maturing our security programs through tooling and process improvements.
• Be a team player:
  • Be part of the team’s weekly on-call rotation.
  • Conduct security investigations across complex cloud environments in response to incidents or …