Senior Security Platform Engineer

Adobe • San Jose, CA

7d

About The Position

Our Company Changing the world through digital experiences is what Adobe’s all about. We give everyone—from emerging artists to global brands—everything they need to design and deliver exceptional digital experiences! We’re passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen. We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours! The Opportunity We are looking for a skilled and innovative Senior Security Platform Engineer to join our Product Security Engineering team at Adobe. This role involves building security data foundations that support our Web Application protection strategy. You will go beyond basic log analysis to develop a Security Knowledge Graph. This graph links vulnerabilities, asset context, and traffic patterns. Your work will help us respond to Zero-Day events quickly by spotting protection gaps in our global infrastructure. You will also help build the "AI-ready" platform foundation for future security agents.

Requirements

• Platform Engineering Approach: Proven experience in a software or security engineering role with a heavy focus on data modeling, systems integration, and building scalable internal tools.
• Security Domain Expertise: Strong understanding of Web Application Firewalls (WAF), vulnerability management, and cloud networking fundamentals.
• Expert Data Manipulation: Strong programming skills in Python and/or SQL/PySpark. You should be comfortable joining disparate, "messy" datasets to build a single source of truth.
• Data Platform Proficiency: Deep experience working with Databricks or similar Delta Lake environments for large-scale data processing and analysis.
• Strategic Problem-Solving: A strong interest in developing the heuristics and logic required to answer complex security questions (e.g., "Which vulnerable apps are missing a WAF?").
• Excellent Communication: Ability to communicate complex platform architectures and risk-based insights in a clear, non-technical manner.
• Forward-Looking: Familiarity with the concepts of Agentic AI or RAG (Retrieval-Augmented Generation) is a major plus, as you will be building the data foundation for these tools.

Responsibilities

• Bridge the Visibility Gap: Act as the platform "detective" to identify when security data is incomplete. You will find and add secondary data sources like DNS, WAF Logs, or internal CMDBs. This ensures we have a complete and clear picture of our Web infrastructure risk.
• Automation and DevSecOps: Write production-grade services to automate complex security workflows, turning manual interventions into reliable, software-based processes. Build automated logic and workflows to instantly identify vulnerable internet-facing services during emerging threats.
• Enable Risk-Based Onboarding: Architect the platform logic to prioritize WAF deployments and rule adjustments based on real-time data from vulnerability management tools and service criticality. Build and maintain "Gold" layer data tables optimized for AI Agents and LLMs. Ensure these tables have clean, relational context for high-value security insights.
• Partner with Data & Security Teams: Work closely with data engineers to improve ingestion pipelines. Collaborate with security researchers to turn high-level threats into detection requirements for the platform.
• Full-Stack Ownership: Lead projects from initial data discovery and requirements gathering to the implementation of production-grade SQL/Spark logic and ongoing system maintenance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 5,001-10,000 employees