Senior Software Development Engineer

About the Role Own FortiCNAPP's composite alerts pipeline — a Python/Spark system that turns thousands of raw security detections into high-confidence intrusion narratives with entity graphs and timelines. You'll be the sole long-term owner of a mature, 5-year-old system, inheriting it from a departed founding engineer with structured onboarding support. Responsibilities

• Own the aggregation engine and the alert/entity/evidence schema shared across teams
• Complete the migration from a cloud data warehouse to an open-table-format lakehouse
• Reduce infrastructure cost (Spark efficiency, warehouse sizing, scheduling)
• Fix alert-quality issues: incomplete graphs, duplicate alerts, mismatched threat tags
• Manage production operations on Kubernetes: deployment, rollout, on-call.

Requirements

• 6+ years building production data/backend systems in Python
• Production-grade Apache Spark experience (debugging OOMs, skew, partitioning)
• Strong SQL and warehouse/lakehouse experience with cost awareness
• Experience owning a cross-team data schema (Protobuf, Avro, Thrift, etc.)
• Kubernetes operations experience (scheduled jobs, rollouts, config management)
• Track record safely retiring legacy systems (parity testing, kill switches)
• Genuine interest in security detection logic
• Comfortable inheriting an under-documented system solo •

Preferred: Graph databases (Neo4j/Cypher), open table formats (Iceberg/Delta/Hudi), cloud security/detection background (AWS/GCP/Azure audit logs, K8s audit events, MITRE ATT&CK), Go, prior experience as a sole service owner.

Must be authorized to work in the U.S. without sponsorship. The US base salary range for this full-time position is $150,000-$183,000. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time, as well as a comprehensive leave program. Wage ranges are based on various factors, including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location. All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at the time of hire and annually at the Company’s discretion.

Why Join Us: We encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well-being. Embark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 890,000+ customers around the globe. Fortinet (NASDAQ: FTNT) secures the largest enterprise, service provider, and government organizations around the world. Fortinet empowers its customers with intelligent, seamless protection across the expanding attack surface and the power to take on ever-increasing performance requirements of the borderless network - today and into the future. Only the Fortinet Security Fabric architecture can deliver security without compromise to address the most critical security challenges, whether in networked, application, cloud or mobile environments. Fortinet ranks number one in the most security appliances shipped worldwide and more than 500,000 customers trust Fortinet to protect their businesses.

We are committed to providing reasonable accommodations for all qualified individuals with disabilities. If you require assistance or accommodation due to a disability, please contact us at [email protected].

Fortinet is an equal opportunity employer. We value diversity in our company, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, military/veteran status or any other applicable legally protected characteristics in the location in which the candidate is applying. Own FortiCNAPP's composite alerts pipeline — a Python/Spark system that turns thousands of raw security detections into high-confidence intrusion narratives with entity graphs and timelines. You'll be the sole long-term owner of a mature, 5-year-old system, inheriting it from a departed founding engineer with structured onboarding support.