Principal Security Software Engineer, FlashArray

BE PART OF BUILDING THE FUTURE.

What do NASA and emerging space companies have in common with COVID vaccine R&D teams or with Roblox and the Metaverse?

The answer is data, -- all fast moving, fast growing industries rely on data for a competitive edge in their industries. And the most advanced companies are realizing the full data advantage by partnering with Pure Storage. Pure’s vision is to redefine the storage experience and empower innovators by simplifying how people consume and interact with data. With 11,000+ customers including 58% of the Fortune 500, we’ve only scratched the surface of our ambitions.

Pure is blazing trails and setting records:

• For ten straight years, Gartner has named Pure a leader in the Magic Quadrant
• Our customer-first culture and unwavering commitment to innovation have earned us a certified Net Promoter Score in the top 1% of B2B companies globally
• Industry analysts and press applaud Pure’s leadership across these dimensions
• And, our 5,000+ employees are emboldened to make Pure a faster, stronger, smarter company as we go

If you, like us, say “bring it on” to exciting challenges that change the world, we have endless opportunities where you can make your mark.

SHOULD YOU ACCEPT THIS CHALLENGE...

We are seeking an experienced and highly skilled Principal Security Engineer to join our dynamic team. In this role, you will lead and drive the security strategy for our products and applications, ensuring they meet the highest standards of security and compliance. You will work closely with cross-functional teams to design, implement, and maintain robust security measures that protect our clients and their data. Additionally, you will play a crucial role in the development of security-related product features, integrating security at every stage of the product lifecycle.

• Security Strategy and Leadership:

  • Develop and implement the overall security strategy for our software products and applications.
  • Provide technical leadership and mentorship to the security engineering team.
  • Stay current with emerging security threats and industry trends to proactively address potential risks.

• Security Design and Architecture:

  • Collaborate with product managers, architects, and developers to design secure software features and architecture.
  • Conduct threat modeling, risk assessments, and vulnerability analysis for new and existing applications.
  • Define and enforce security best practices and standards throughout the software development lifecycle (SDLC).

• Product and Application Security:

  • Lead efforts to identify, assess, and remediate security vulnerabilities in our products and applications.
  • Implement and maintain security tools and technologies for continuous monitoring and protection.
  • Perform code reviews, penetration testing, and security audits to ensure compliance with security requirements.

• Development of Security-Oriented Product Features:

  • Drive the development of security-oriented product features, ensuring they are designed and implemented with the highest security standards.
  • Work closely with the product development team to provide security insights and guidance throughout the product lifecycle.
  • Evaluate and recommend new technologies and tools to enhance the security capabilities of our products.

• Incident Response and Management:

  • Develop and maintain incident response plans and procedures.
  • Lead investigations and response efforts for security incidents and breaches.
  • Conduct root cause analysis and implement corrective actions to prevent future incidents.

• Collaboration and Communication:

  • Work closely with other engineering teams, including DevOps and IT, to integrate security practices into all aspects of the development and deployment processes.
  • Communicate security risks, incidents, and mitigation strategies to stakeholders, including executive leadership.
  • Provide training and awareness programs to promote a security-conscious culture within the organization.

WHAT YOU’LL NEED TO BRING TO THIS ROLE...

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• 8+ years of experience in security engineering or a related role, with a focus on product and application security.
• In-depth knowledge of security principles, protocols, and best practices.
• Experience with security assessment tools, penetration testing, and vulnerability management.
• Strong understanding of software development methodologies, including Agile and DevOps.
• Proven experience in secure coding practices and secure software development lifecycle (SDLC).
• Excellent problem-solving skills and the ability to think like an attacker.
• Strong communication and leadership skills, with the ability to influence and drive security initiatives across the organization.

You will be based in Santa Clara, CA. As this is an office-centric role, you are expected to be present in the office for 4 days a week. As outlined in Pure's Hybrid Work Policy, there will be variations over periods of time, depending on business need.

The annual base salary range is: $228,000– $342,000. Salary ranges are determined based on role, level and location. For positions open to candidates in multiple geographical locations, the base salary range is reflective of the labor market across the applicable locations.

This role may be eligible for incentive pay and/or equity.

And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time off, wellness resources, and company-sponsored team events - check out *purebenefits.com** for more information.*

There is no application deadline and we accept applications on an ongoing basis until the job is filled. #LI-ONSITE

BE YOU—CORPORATE CLONES NEED NOT APPLY.

Pure is where you ask big questions, think differently, and make an impact. This is not just a job, but a place where you have a voice and can accelerate your career. We value unique thoughts and celebrate individuality, and with ample opportunity to learn, develop yourself, and expand into different roles, joining Pure is an investment in your career journey.

Through our Pure Equality program, which supports a flourishing field of employee resource groups, we nourish the personal and professional lives of our team members. And our Pure Good Foundation gives back to local and global communities through volunteering and grants.

And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time off, wellness resources, and company-sponsored team events.

PURE IS COMMITTED TO EQUALITY.

Research shows that in order to apply for a job, women feel they need to meet 100% of the criteria while men usually apply after meeting about 60%. Regardless of how you identify, if you believe you can do the job and are a good match, we encourage you to apply.

Pure is proud to be an equal opportunity and affirmative action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or any other characteristic legally protected by the laws of the jurisdiction in which you are being considered for hire.

If you need assistance or an accommodation due to a disability, you may contact us at [email protected].

APPLICANT & CANDIDATE PERSONAL INFORMATION PRIVACY NOTICE.

If you're wondering how or why Pure collects or uses information you provide, we invite you to check out our Applicant & Candidate Personal Information Protection Notice.

DEEMED EXPORT LICENSE NOTICE.

Some positions may require a deemed export license for compliance with applicable laws and regulations. Please note: Pure does not currently sponsor deemed export license applications so we are unable to proceed with applicants requiring stated sponsorship.