Security Engineer/Backend developer (StorageGRID)

Job Summary

NetApp is pioneering the development of StorageGRID object storage – AWS cloud compatible software powering the exponential growth in AI data lakes. As a Security engineer, this is your chance to work alongside a group of talented developers, impart your vision, and launch the latest secure cloud storage software. Your deep security expertise and strategic insight will continuously strengthen security posture, proactively mitigate current risks and deterring emerging threats.

Job Requirements

Key Responsibilities:  

• Design, build, and deliver security features and security-by-design improvements across products and platforms. 


• Perform threat modeling for new services and major changes; ensure mitigations are implemented and validated. 


• Lead vulnerability assessments (SAST/DAST/SCA, manual review, Pen Test support) and drive remediation end-to-end. 


• Provide security architecture and design reviews for services, APIs, identity flows and other artefacts 


• Integrate security controls into CI/CD pipelines and developer workflows (guardrails, policies, secure libraries). 


• Act as a security subject-matter expert supporting incident investigations and post-incident improvements. 

Additional skills: 

• Experience with authN/authZ systems (OAuth2/OIDC, SSO, JWT, RBAC/ABAC) and multi-tenant SaaS security would be plus 


• Experience with fuzzing, secure protocol design, or security testing frameworks  

Additional Qualification: 

• Good exposure of AI and usage in engineering development lifecycle  


• Strong knowledge of web, API, and distributed systems security; familiarity with OWASP Top 10 and common exploit chains. 


• Experience with vulnerability management workflows (triage, prioritization, remediation, verification). 


• Proficiency in secure coding and code review in at least one major language (e.g., Ruby, C++, Go, Python, Java). 


• Practical experience integrating security into CI/CD (SAST/DAST/SCA, secrets scanning, IaC/container scanning). 

Education

A minimum of 5 years of experience is required. 5 to 7 years of experience is preferred.