Product Security Engineer II - Secure Cloud & Apps

International Business Machines Corporation; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

IBM is seeking a Product Security Engineer to help scale our product security function across HashiCorp's offerings, now part of IBM, spanning cloud, self-managed, and community products. You will partner with Research & Development teams to ensure security is appropriately addressed across the HashiCorp suite of cloud, self-managed, and community products.

In this role, your responsibilities will include designing secure architectures, performing threat modeling, conducting security

Qualifications

• 4+ years of product security experience partnering with engineering teams to design and secure applications and platforms.
• Strong cloud and security architecture expertise including threat modeling for AWS, Azure, and/or GCP.
• Hands-on experience with application and infrastructure security, testing, vulnerability mgmt, and secure SDLC.
• Knowledge of identity, authentication, and cryptography (SSO, SAML, OIDC, SCIM).
• Experience with security operations, audits, vulnerability disclosure programs, and bug-bounty management.

Responsibilities

• Contribute to secure architecture and design of HashiCorp products across cloud, self-managed, and community offerings.
• Collaborate with R&D teams to prioritize security features and mitigations.
• Monitor threats and vulnerabilities; triage, mitigate, and communicate risk.
• Act as SME on security areas such as architecture, app security, threat modeling.
• Plan and execute security assessments and threat modeling of products and cloud infrastructure.
• Assist in third-party audits, penetration tests, and bug bounty programs.
• Contribute to security tooling and CI/CD integrations across the life-cycle.
• Deliver security training and educate teams on secure practices.
• Research emerging attack vectors and techniques.

Skills

Product security

Cloud security

Application security

Identity & cryptography

Security operations

Tools

Go (Golang)

Job description

IBM is seeking a Product Security Engineer to help scale our product security function across HashiCorp's offerings, now part of IBM, spanning cloud, self-managed, and community products. You will partner with Research & Development teams to ensure security is appropriately addressed across the HashiCorp suite of cloud, self-managed, and community products.

In this role, your responsibilities will include designing secure architectures, performing threat modeling, conducting security