Product Security Engineer II — Cloud & DevSecOps

International Business Machines Corporation; Austin (TX); Sur place; USD 130 000 - 180 000; Plein temps

Résumé du poste

IBM is seeking a Product Security Engineer to help scale our product security function, partnering with Research & Development teams to secure HashiCorp’s cloud, self-managed, and community products. You will contribute to secure architecture and drive threat modeling across a broad product portfolio.

The role requires hands-on experience in vulnerability management, secure SDLC practices, and governance, with a focus on AWS, Azure, and GCP environments.

Qualifications

• 4+ years of product security experience with engineering teams.
• Strong cloud architecture experience across AWS, Azure, and/or GCP.
• Hands-on testing, vulnerability management, and secure SDLC.
• Knowledge of SSO, SAML, OIDC, and SCIM.
• Experience with audits and bug bounty programs.

Responsabilités

• Contribute to secure architecture and design across HashiCorp products.
• Collaborate with R&D teams to prioritize security features and mitigations.
• Monitor threats and triage vulnerabilities; assess risk.
• Act as SME on security areas like architecture and threat modeling.
• Plan and execute security assessments and threat modeling.
• Assist in third-party audits, penetration tests, and bug bounty programs.
• Contribute to security solutions across the product life-cycle.

Connaissances

Product security

Cloud security

Threat modeling

Vulnerability management

Secure SDLC

Identity & cryptography

Security governance

Go language

Formation

Bachelor's Degree

Outils

AWS

Azure

GCP

Description du poste

IBM is seeking a Product Security Engineer to help scale our product security function, partnering with Research & Development teams to secure HashiCorp’s cloud, self-managed, and community products. You will contribute to secure architecture and drive threat modeling across a broad product portfolio.

The role requires hands-on experience in vulnerability management, secure SDLC practices, and governance, with a focus on AWS, Azure, and GCP environments.