Security Engineer, Anti-Abuse, Streamlit Community Cloud

We are looking for motivated, passionate experts in security engineering, fraud and anti-abuse to focus on protecting Streamlit Community Cloud. Streamlit is an open-source Python library that makes it easy to create and share beautiful, custom web apps for machine learning and data science. As a member of the Security and Anti-Abuse team, you’ll be responsible for building tools and strategies to defend Streamlit Community Cloud and Snowflake from bad actors and abuse. 

In this role, you will work with cross-functional partners from many teams including the Streamlit team, threat detection, incident response, and product security to analyze abuse vectors and define roadmaps and strategies. You will be responsible for anticipating and protecting against abuse threats, building necessary tools, and defining abuse detection and response playbooks.

• Bachelor's degree in Computer Science or related technical field or equivalent practical experience.
• Fluency in one or more programming or scripting languages: Java, Python, C++, Go, JavaScript.
• Knowledge of security engineering, computer and network security, security protocols, and applied cryptography.
• Expert understanding of software security architecture and design, threat modeling, code review, SDLC best practices, and mitigations for common application security issues
• Experience deploying and customizing security tools like vulnerability scanners, static analyzers, web application firewalls, endpoint security monitors to detect abuse, security threats and other risks like cryptomining, fraud detection, obfuscation/evasion techniques, etc.

PREFERRED QUALIFICATIONS :

• Experience designing, testing, and maintaining anti-abuse solutions and/or abuse detection and response playbooks
• Prior experience working in a high growth, cloud native technology company
• Understanding of modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.
• Ability to write SQL queries and build dashboards, metrics, and reports to drive security outcomes
• Experience using CI/CD pipelines to perform automated security testing