Manager, Product Vulnerability Engineering

Security and Risk ManagementRemote, California


Description

Splunk, a Cisco company, is building a safer and more resilient digital world with an end-to-end full stack platform made for a hybrid, multi-cloud world. Leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable. Our customers love our technology, but it's our caring employees that make Splunk stand out as an amazing career destination. No matter where in the world or what level of the organization, we approach our work with kindness. So bring your work experience, problem-solving skills and talent, of course, but also bring your joy, your passion and all the things that make you, you. Come help organizations be their best, while you reach new heights with a team that has your back.

Role Summary

Are you passionate about tackling sophisticated, high-impact security challenges at scale? Join our dynamic Software Security Engineering team and work alongside product development teams to embed ground breaking secure software practices across the entire Splunk product portfolio. In this role, you'll dive deep into identifying evolving vulnerability patterns, analyze real-world attack tactics, and craft innovative security solutions that safeguard Splunk’s industry-leading products. Collaborating with Product Security, Risk, and Compliance teams, you’ll play a pivotal role in ensuring Splunk not only meets but exceeds new policy and regulatory requirements. Get ready to make a tangible impact on the future of security at Splunk!

Meet the Global Security Team

Splunk is here to build a safer and more resilient digital world. The world's leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable. While customers love our technology, it's our people that make Splunk stand out as an amazing career destination and why we've won so many awards as a best place to work. If you become a Splunker, we want your whole, authentic self, what we call your "million data points". So bring your work experience, problem-solving skills and talent, of course, but also bring your joy, your passion and all the things that make you, you.

What you'll get to do

  • Analyze and Innovate: Identify emerging code vulnerability trends and research real-world attack patterns to stay ahead of evolving security threats.
  • Develop Cutting-Edge Solutions: Design and implement sophisticated security mechanisms that protect Splunk’s products from vulnerabilities and attacks.
  • Collaborate Across Teams: Work closely with Product Development, Product Security, Risk, and Compliance teams to ensure security is woven into every phase of the software development lifecycle.
  • Shape Security Strategy: Contribute to crafting Splunk’s security strategy by integrating secure coding standards and vulnerability management into the product pipeline.
  • Drive Regulatory Excellence: Ensure Splunk remains proactive and aligned with the latest policy and regulatory requirements.

Must-have Qualifications

  • 5 years experience as an engineering manager or technical project lead.
  • 5 years experience in Product Security, Application Security, or Software Development roles.
  • 3 years of programming in languages such as Python, Java, C++, or Go, and the ability to identify and remediate security issues in code.
  • Strong understanding of risk management principles and popular regulatory requirements (e.g., FEDRAMP, HIPAA, SOC 2) and how they impact security and software development.
  • Analytical and problem-solving abilities to address sophisticated security challenges at scale.
  • Bachelors degree in Computer Science or equivalent work experience.

Nice-to-have Qualifications

We’ve taken special care to separate the must-have qualifications from the nice-to-haves. “Nice-to-have” means just that: Nice. To. Have. So, don’t worry if you can’t check off every box. We’re not hiring a list of bullet points–we’re interested in the whole you.
  • Familiarity with threat modeling techniques.
  • Experience implementing security tooling and automation within software build pipelines.
  • Proven track record to work effectively in cross-functional teams to implement security practices.
  • Security certifications such as CompTIA Security+ or GIAC Security Essentials.
Splunk is an Equal Opportunity Employer
Splunk, a Cisco company, is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis.

Note:

Base Pay Range

SF Bay Area, Seattle Metro, and New York City Metro Area

Base Pay Range: $174,800.00 - 240,350.00 per year

California (excludes SF Bay Area), Washington (excludes Seattle Metro), Washington DC Metro, and Massachusetts

Base Pay Range: $157,320.00 - 216,315.00 per year

All other cities and states excluding California, Washington, Massachusetts, New York City Metro Area and Washington DC Metro Area.

Base Pay Range: $139,840.00 - 192,280.00 per year

Splunk provides flexibility and choice in the working arrangement for most roles, including remote and/or in-office roles. We have a market-based pay structure which varies by location. Please note that the base pay range is a guideline and for candidates who receive an offer, the base pay will vary based on factors such as work location as set out above, as well as the knowledge, skills and experience of the candidate. In addition to base pay, this role is eligible for incentive compensation and may be eligible for equity or long-term cash awards.

Benefits are an important part of Splunk's Total Rewards package. This role is eligible for a competitive benefits package which includes medical, dental, vision, a 401(k) plan and match, paid time off and much more! Learn more about our next-level benefits at https://splunkbenefits.com.

Thank you for your interest in Splunk!