About the Role

Own FortiCNAPP's composite alerts pipeline — a Python/Spark system that turns thousands of raw security detections into high-confidence intrusion narratives with entity graphs and timelines. You'll be the sole long-term owner of a mature, 5-year-old system, inheriting it from a departed founding engineer with structured onboarding support.

Responsibilities

• Own the aggregation engine and the alert/entity/evidence schema shared across teams
• Complete the migration from a cloud data warehouse to an open-table-format lakehouse
• Reduce infrastructure cost (Spark efficiency, warehouse sizing, scheduling)
• Fix alert-quality issues: incomplete graphs, duplicate alerts, mismatched threat tags
• Manage production operations on Kubernetes: deployment, rollout, on-call.

Requirements

• 6+ years building production data/backend systems in Python
• Production-grade Apache Spark experience (debugging OOMs, skew, partitioning)
• Strong SQL and warehouse/lakehouse experience with cost awareness
• Experience owning a cross-team data schema (Protobuf, Avro, Thrift, etc.)
• Kubernetes operations experience (scheduled jobs, rollouts, config management)
• Track record safely retiring legacy systems (parity testing, kill switches)
• Genuine interest in security detection logic
• Comfortable inheriting an under-documented system solo
•  

Preferred: Graph databases (Neo4j/Cypher), open table formats (Iceberg/Delta/Hudi), cloud security/detection background (AWS/GCP/Azure audit logs, K8s audit events, MITRE ATT&CK), Go, prior experience as a sole service owner.

Must be authorized to work in the U.S. without sponsorship.

The US base salary range for this full-time position is $150,000-$183,000. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time, as well as a comprehensive leave program.

Wage ranges are based on various factors, including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.

All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at the time of hire and annually at the Company’s discretion.