You
You are a developer who cares deeply about security. You visibly twitch when you see passwords in clear text. You love understanding how systems are put together and the security implications of design decisions. You think about whether that network traffic is going over SSL, if it is encrypted at rest, or if that process is running as root and could be hijacked. You enjoy finding security holes (and then, of course, reporting them responsibly). You keep up with the latest CVEs, and delight in replicating exploits. Ultimately you feel a deep sense of satisfaction in fixing security vulnerabilities.
Us
At Pivotal, our mission is to enable customers to build a new class of applications, leveraging big and fast data, and do all of this with the power of cloud-independence. Pivotal’s offering includes the Big Data Suite, the most complete approach to enterprise data lakes and advanced analytics; Pivotal Cloud Foundry, the industry leading Platform as a Service product; and world leading ultra-agile application development through Pivotal Labs. Open source is an important part of our strategy. Many of our products are already open source; those that are not will be soon.
The Big Data Suite includes HAWQ, our SQL on Hadoop solution; Greenplum Database (GPDB), our massively parallel data warehouse; GemFire, our distributed in-memory key-value store; and MADlib, our machine learning solution. The Data engineering teams tackle the technical challenges that come with massively parallel distributed systems operating at scale on petabytes of data where our customers rely on us to keep their data secure. Here at Pivotal you'll be working on hard problems with a collaborative team, accelerating your growth as a security engineer.
Where
This position is located in our light-filled spacious office in Palo Alto, CA near 280.
To make sure you start your day energized, we provide a catered breakfast every weekday morning, and unlimited snacks/drinks are of course available all day. Our collaborative, open-plan office space is filled with talented, like-minded engineers who enjoy taking advantage of our weekly Tech Talks, yoga classes, playing ping pong, and hanging out with their co-workers.
Major Responsibilities
- Participate in the architecture, design, development and testing of security enhancements for GPDB (an MPP database based on PostgreSQL) and HAWQ (our SQL on Hadoop solution, also based on PostgreSQL).
- Deliver robust, fault tolerant, production code - this is a hands on coding position.
- Interact with members of the Pivotal Team to enhance the overall Pivotal security vision.
Required Skills
- Linux systems code development in C/C++
- Linux based products deployed in mission critical, enterprise environments
- Security scan tools such as Coverity, Appscan, Nessus, Fortify, etc.
- Familiarity with top risks (e.g. CWE top 25 or OWASP top 10) and industry security best practices. Formal training in security preferred.
- Experience working with database internals, especially Postgres, preferred
- Bachelors degree in Computer Science or related field. Advance degrees preferred.
