Hybrid Cloud Product Security Engineer II

International Business Machines Corporation; New York (NY); Hybrid; USD 77,000 - 132,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) plan

Paid time off

Job summary

IBM Security is seeking a Product Security Engineer II to help scale our secure software efforts across HashiCorp and IBM cloud offerings. You will design secure architectures, perform threat modeling, and guide engineers to implement secure software across cloud, on-prem, and community products.

The role emphasizes collaboration, security testing, and proactive risk management. The position requires 4+ years in product security, strong cloud architecture skills, and hands-on security experience

Qualifications

• 4+ years of product security experience, partnering with engineering teams to design and secure applications and platforms.
• Strong cloud and security architecture expertise, including threat modeling and securing AWS, Azure, and/or GCP environments.
• Hands-on experience with application and infrastructure security, testing, vulnerability management, remediation, and secure SDLC practices.
• Knowledge of identity, authentication, and cryptography, including SSO, SAML, OIDC, and SCIM.
• Experience with security operations and governance, including audits, vulnerability disclosure programs, and bug bounty management.

Responsibilities

• Contribute to secure architecture and design of HashiCorp products across cloud, self-managed, and community portfolios.
• Work with R&D teams to prioritize security features and fixes, and implement mitigations.
• Monitor threats and vulnerabilities; triage, mitigate, and communicate risk.
• Serve as SME on information security areas including security architecture and threat modeling.
• Plan and execute security assessments and threat modeling of products and cloud infrastructure.
• Assist in 3rd-party audits, penetration tests, and bug bounty programs.
• Develop security solutions across the product life cycle and CI/CD pipelines.
• Contribute to security training and stay current on emerging attack vectors.

Skills

Product security

Cloud security

App security

Threat modeling

Vulnerability management

Security testing

Education

High School Diploma/GED

Bachelor's Degree

Tools

Go language

Docker

Kubernetes

Job description

IBM Security is seeking a Product Security Engineer II to help scale our secure software efforts across HashiCorp and IBM cloud offerings. You will design secure architectures, perform threat modeling, and guide engineers to implement secure software across cloud, on-prem, and community products.

The role emphasizes collaboration, security testing, and proactive risk management. The position requires 4+ years in product security, strong cloud architecture skills, and hands-on security experience