Security Software Engineer

About Cohesity

Cohesity is the leader in AI-powered data security. Over 13,600 enterprise customers, including over 85 of the Fortune 100 and nearly 70% of the Global 500, rely on Cohesity to strengthen their resilience while providing Gen AI insights into their vast amounts of data. Formed from the combination of Cohesity with Veritas’ enterprise data protection business, the company’s solutions secure and protect data on-premises, in the cloud, and at the edge. Backed by NVIDIA, IBM, HPE, Cisco, AWS, Google Cloud, and others, Cohesity is headquartered in Santa Clara, CA, with offices around the globe.

We’ve been named a Leader by multiple analyst firms and have been globally recognized for Innovation, Product Strength, and Simplicity in Design, and our culture.

Key Responsibilities

• Design, develop, and maintain security features, tools, frameworks, and automation for enterprise-scale products and platforms.
• Contribute to secure architecture and design reviews for new and existing systems.
• Perform threat modeling, risk assessment, and security reviews for product features, services, APIs, and infrastructure components.
• Identify, analyze, and remediate security vulnerabilities in application code, services, cloud infrastructure, and third-party dependencies.
• Build and improve security automation for vulnerability detection, remediation, compliance validation, secrets management, and policy enforcement.
• Partner with engineering teams to implement secure coding practices and security-by-design principles.
• Expertise in using AI to build Security Code Scanning, Patching and CVE discovery similar to SAST, DAST, SCA, container security, and identity systems.
• Work on authentication, authorization, access control, encryption, key management, audit logging, and secure communication mechanisms.
• Participate in incident response activities, root cause analysis, and long-term remediation planning when required.
• Define and implement security best practices for cloud-native, distributed, and microservices-based environments.
• Mentor junior engineers and help raise the security engineering maturity of the broader organization.
• Create technical documentation, design specifications, security guidelines, and operational runbooks.

Required Qualifications

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical field.
• 8+ years of software development experience, with at least 4+ years focused on security engineering, application security, product security, or cloud security.
• Strong programming experience in one or more languages such as Go, Python, or Rust.
• Deep understanding of secure software development lifecycle practices.
• Strong knowledge of application security concepts, including OWASP Top 10, secure coding, input validation, authentication, authorization, session management, and API security.
• Experience with threat modeling, security architecture reviews, and vulnerability remediation.
• Good understanding of cryptography fundamentals, TLS, PKI, encryption, hashing, signing, and key management.
• Experience with cloud platforms such as AWS, Azure, or GCP.
• Familiarity with container and Kubernetes security concepts.
• Experience with CI/CD security, DevSecOps practices, and security automation.
• Strong debugging, problem-solving, and analytical skills.
• Ability to work independently on complex technical problems with minimal supervision.
• Excellent written and verbal communication skills.

Data Privacy Notice for Job Candidates

For information on personal data processing, please see our Privacy Policy.

Equal Employment Opportunity Employer (EEOE)

Cohesity is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression.