Product Security Architect - Remote Kubernetes

Hitachi Energy; United States; Remote; USD 130,000 - 160,000; Full time

Job summary

Hitachi Vantara in the United States seeks a Product Security Architect to support VSP One Object/File. You will provide hands-on security expertise across Kubernetes, storage services, APIs, and authentication, turning risks into actionable engineering guidance.

Requires 5+ years in product or cloud security, CVE experience, threat modeling, and penetration testing, with clear communication to engineers and leadership.

Qualifications

• 5+ years of hands-on experience in product, application, cloud, container, infrastructure security, or penetration testing.
• Strong experience securing Kubernetes-based, containerized, storage, or complex distributed platforms.
• Deep understanding of Kubernetes, Linux, network and API security, authentication and authorization, secrets management, TLS/mTLS, encryption, and key management.
• Experience assessing object and/or file storage, including S3-compatible interfaces, access controls, multitenancy, and data-protection boundaries.
• Proven ability to investigate CVEs and determine product applicability, reachability, exploitability, and actual customer impact.
• Ability to review source code, Kubernetes YAML, Helm charts, scripts, configurations, SBOMs, and third-party dependencies from a security perspective.
• Hands-on penetration testing and vulnerability validation experience using tools such as kubectl, Trivy, Grype, Burp Suite, OpenSSL, and Nmap.
• Ability to develop proof-of-concept tests, reproduce vulnerabilities, and independently verify remediation.
• Strong written and verbal communication skills, with the ability to translate security risks into clear, actionable engineering recommendations.
• Certifications such as CKS, OSCP, GPEN, or CISSP are preferred, with demonstrated hands-on security expertise valued above certification alone.

Responsibilities

• Lead threat modeling and security architecture assessments for VSP One Object/File.
• Investigate CVEs for applicability and exploitability and validate remediation.
• Perform targeted security testing and verify mitigations.
• Collaborate with Engineering to identify root causes and attack paths, translating risks into design improvements.
• Communicate risk prioritization to Engineering, Product Management, customers, and leadership.
• Support security advisories, SBOM/SCA analysis, customer inquiries, and regulatory requirements.

Skills

Kubernetes security

Container security

Threat modeling

Penetration testing

Vulnerability assessment

Encryption & key management

APIs security

Security risk communication

Tools

kubectl

Trivy

Grype

Burp Suite

OpenSSL

Nmap

Helm charts

SBOM tooling

Job description

Hitachi Vantara in the United States seeks a Product Security Architect to support VSP One Object/File. You will provide hands-on security expertise across Kubernetes, storage services, APIs, and authentication, turning risks into actionable engineering guidance.

Requires 5+ years in product or cloud security, CVE experience, threat modeling, and penetration testing, with clear communication to engineers and leadership.