System Security Officer

About The Position

WEKA is leading a paradigm shift in how data is stored, managed, and processed in the cloud and AI era. We are a pre-IPO, growth-stage company on a hyper-growth trajectory that has raised over $275M in capital and is backed by dozens of world-class venture capital and strategic investors.

Our flagship product, the WEKA® Data Platform, is a software-based, hybrid cloud solution transforming stagnant legacy data siloes into dynamic data pipelines that power GPUs efficiently and fuel performance-intensive workloads like generative AI and machine learning seamlessly and sustainably.

We’re passionate about helping our customers overcome complex data management challenges to accelerate their innovation and help grow their businesses. If you share our passion, we invite you to join us on this exciting journey.

We are looking for an experienced System Security Officer to lead Weka’s product and application security and compliance. This role requires close collaboration with product development, engineering, and security teams to embed security best practices across the product lifecycle—from design and development to deployment and maintenance.

As a System Security Officer, you will lead initiatives to identify, mitigate, and manage security risks in the company’s products while working directly with internal and external stakeholders to ensure the highest security standards for the organization's products.

Key Responsibilities

• Ensure security best practices are embedded in all stages of product development, including design, coding, testing, and deployment.
• Work with development teams to incorporate secure coding practices and reduce potential attack surfaces.
• Collaborate with development and engineering teams to ensure timely resolution of security vulnerabilities.
• Lead penetration testing and ensure fast resolution of all critical issues found.
• Lead the response to product-related security incidents, coordinating with cross-functional teams to ensure swift identification, resolution, and communication of security issues.
• Write requirements for proactive measures such as monitoring, logging, and incident detection for the system running in customer production.
• Ensure that products comply with relevant industry security standards and regulations (e.g., OWASP, ISO 27001, GDPR, PCI DSS).
• Engage with customers, partners, and vendors to address security concerns related to products.
• Work closely with the sales and legal teams to respond to customer security questionnaires, negotiate security terms in contracts, and address customer security issues.
• Recommend and implement security tools, frameworks, and automation processes to streamline security testing and vulnerability management across product lines.
• Maintain and improve security tooling and automation pipelines for continuous integration/continuous deployment (CI/CD) environments.
  
  

• 5+ years of experience in security, with a focus on product security, application security, or DevSecOps.
• Strong understanding of secure software development lifecycle (SDLC) and secure coding practices.
• Experience with threat modeling, vulnerability assessments, and penetration testing for software products.
• Strong knowledge of application security concepts (e.g., OWASP Top Ten) and experience with security testing tools (e.g., static and dynamic analysis tools, vulnerability scanners).
• Familiarity with cloud security (AWS, Azure, GCP) and container security (Kubernetes, Docker).
• Understanding of modern development frameworks, languages (e.g., Python, JavaScript, Java, C++), and CI/CD pipelines.
• Experience working in Agile development environments.
• Hands-on experience with DevSecOps tools and methodologies.
• Familiarity with privacy regulations and data protection laws (e.g., GDPR, CCPA).
• Excellent communication skills with the ability to explain technical security concepts to non-technical stakeholders.