Product Security Architect (Remote US)

Hitachi Energy; United States; Remote; USD 130,000 - 160,000; Full time

Job summary

Hitachi Vantara in the United States seeks a Product Security Architect to support VSP One Object/File. You will provide hands-on security expertise across Kubernetes, storage services, APIs, and authentication, turning risks into actionable engineering guidance.

Requires 5+ years in product or cloud security, CVE experience, threat modeling, and penetration testing, with clear communication to engineers and leadership.

Qualifications

• 5+ years of hands-on experience in product, application, cloud, container, infrastructure security, or penetration testing.
• Strong experience securing Kubernetes-based, containerized, storage, or complex distributed platforms.
• Deep understanding of Kubernetes, Linux, network and API security, authentication and authorization, secrets management, TLS/mTLS, encryption, and key management.
• Experience assessing object and/or file storage, including S3-compatible interfaces, access controls, multitenancy, and data-protection boundaries.
• Proven ability to investigate CVEs and determine product applicability, reachability, exploitability, and actual customer impact.
• Ability to review source code, Kubernetes YAML, Helm charts, scripts, configurations, SBOMs, and third-party dependencies from a security perspective.
• Hands-on penetration testing and vulnerability validation experience using tools such as kubectl, Trivy, Grype, Burp Suite, OpenSSL, and Nmap.
• Ability to develop proof-of-concept tests, reproduce vulnerabilities, and independently verify remediation.
• Strong written and verbal communication skills, with the ability to translate security risks into clear, actionable engineering recommendations.
• Certifications such as CKS, OSCP, GPEN, or CISSP are preferred, with demonstrated hands-on security expertise valued above certification alone.

Responsibilities

• Lead threat modeling and security architecture assessments for VSP One Object/File.
• Investigate CVEs for applicability and exploitability and validate remediation.
• Perform targeted security testing and verify mitigations.
• Collaborate with Engineering to identify root causes and attack paths, translating risks into design improvements.
• Communicate risk prioritization to Engineering, Product Management, customers, and leadership.
• Support security advisories, SBOM/SCA analysis, customer inquiries, and regulatory requirements.

Skills

Kubernetes security

Container security

Threat modeling

Penetration testing

Vulnerability assessment

Encryption & key management

APIs security

Security risk communication

Tools

kubectl

Trivy

Grype

Burp Suite

OpenSSL

Nmap

Helm charts

SBOM tooling

Job description

FunctionEngineeringOur CompanyWe’re Hitachi Vantara, the data foundation trusted by the world’s innovators. Our resilient, high-performance data infrastructure means that customers – from banks to theme parks – can focus on achieving the incredible with data.If you’ve seen the Las Vegas Sphere, you’ve seen just one example of how we empower businesses to automate, optimize, innovate – and wow their customers. Right now, we’re laying the foundation for our next wave of growth. We’re looking for people who love being part of a diverse, global team – and who get excited about making a real-world impact with data.Job descriptionThis is a remote US position. Candidates must be legally authorized to work in the United States and will not require sponsorship now or in the future.The teamPlatform Integrity Engineering safeguards the security, integrity, and resilience of our products throughout the product lifecycle. The team serves as a technical security partner to Engineering and Product Management, helping ensure security is built into product architecture, development, release, and ongoing vulnerability management. Our scope includes product security architecture, threat modeling, Kubernetes and container security, vulnerability research, penetration testing, secure development practices, and customer and compliance support.The roleAs a Product Security Architect supporting VSP One Object/File, you will provide hands-on security expertise across Kubernetes infrastructure, object and file storage services, APIs, management interfaces, networking, authentication, and data protection. You will lead threat modeling and security architecture assessments, investigate CVEs for applicability and exploitability, perform targeted security testing, and validate remediation. You will partner directly with Engineering to identify root causes and attack paths and translate complex security risks into clear, actionable engineering recommendations, security controls, and design improvements. Strong communication skills are essential to effectively articulate risk, customer impact, and remediation priorities to Engineering, Product Management, customers, security stakeholders, and leadership. You will also support security advisories, VEX, SBOM/SCA analysis, customer security inquiries, and applicable security and regulatory requirements.What you’ll bring5+ years of hands-on experience in product, application, cloud, container, infrastructure security, or penetration testing.Strong experience securing Kubernetes-based, containerized, storage, or complex distributed platforms.Deep understanding of Kubernetes, Linux, network and API security, authentication and authorization, secrets management, TLS/mTLS, encryption, and key management.Experience assessing object and/or file storage, including S3-compatible interfaces, access controls, multitenancy, and data-protection boundaries.Proven ability to investigate CVEs and determine product applicability, reachability, exploitability, and actual customer impact.Ability to review source code, Kubernetes YAML, Helm charts, scripts, configurations, SBOMs, and third-party dependencies from a security perspective.Hands-on penetration testing and vulnerability validation experience using tools such as kubectl, Trivy, Grype, Burp Suite, OpenSSL, and Nmap .Ability to develop proof-of-concept tests, reproduce vulnerabilities, and independently verify remediation.Strong written and verbal communication skills, with the ability to translate security risks into clear, actionable engineering recommendations.Certifications such as CKS, OSCP, GPEN, or CISSP are preferred, with demonstrated hands-on security expertise valued above certification alone.As required by the equal pay and transparency acts, the expected base salary for this position is: $130K to $160K. The expected on-target earnings for this position is: $145k to $175k.The expected pay is determined based on a variety of factors including, but not limited to, depth of experience in the practice area. Employees are eligible to participate in Hitachi Vantara’s bonus/variable/commission pay programs, where applicable, and are subject to the program’s conditions and restrictions.#LI-JS2About usWe’re a global team of innovators. Together, we harness engineering excellence and passion for insight to co-create meaningful solutions to complex challenges. We turn organizations into data-driven leaders that can a make positive impact on their industries and society. If you believe that innovation can inspire the future, this is the place to fulfil your purpose and achieve your potential.Fostering innovation through diverse perspectivesHitachi is a global company operating across a wide range of industries and regions. One of the things that sets Hitachi apart is the diversity of our business and people, which drives our innovation and growth.We are committed to building an inclusive culture based on mutual respect and merit-based systems. We believe that when people feel valued, heard, and safe to express themselves, they do their best work.How we look after youWe help take care of your today and tomorrow with industry-leading benefits, support, and services that look after your holistic health and wellbeing. We’re also champions of life balance and offer flexible arrangements that work for you (role and location dependent). We’re always looking for new ways of working that bring out our best, which leads to unexpected ideas. So here, you’ll experience a sense of belonging, and discover autonomy, freedom, and ownership as you work alongside talented people you enjoy sharing knowledge with.We’re proud to say we’re an equal opportunity employer and welcome all applicants for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, age, disability status or any other protected characteristic. Should you need reasonable accommodations during the recruitment process, please let us know so that we can do our best to set you up for success.