Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
3 Intel Signals
How they approach application security
Cloudera's Application Security philosophy centers on the 'Shift Left' principle, emphasizing the automation of security controls and the enablement of developers through self-service tooling.
The stated goal is to shift security left by designing, developing, and deploying self-service security tools and services that embed into developer workflows.
The company follows a risk-based approach where risk analysis is performed across the software development lifecycle.
The team
Cloudera's Product Security team is integrated into the Engineering business area.
The security organization is led by CISO Eddie Garcia.
Key personnel include a Sr. Staff Technical Program Manager for Product Security, indicating a structured approach to program management within the security domain.
The team currently has 2 active AppSec job postings focusing on staff-level security engineers with expertise in CI/CD pipeline security and self-service security tooling.
What they're working on
Cloudera's active initiatives focus on integrating security into the CI/CD pipeline and enhancing application-level security controls.
Key initiatives include: (1) Automating and integrating security controls into CI/CD pipelines, (2) Implementing SAST analysis for all software components, (3) Conducting automated DAST scanning on every release, (4) Consolidating security tool outputs through ASPM platforms for context-rich vulnerability management, and (5) Enforcing authentication controls and preventing public application exposure through secure SDLC practices.
