Product Security Engineer — Secure-by-Design Champion

International Business Machines Corporation; United States; Ibrido; USD 161.000 - 276.000; Tempo pieno

Descrizione del lavoro

IBM is seeking a Senior Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams, embedding security into the product development lifecycle. You will conduct threat modeling, architecture reviews, and vulnerability assessments, guiding secure design and remediation.

Strong collaboration with Product Security and Operations is essential to protect our AI-powered, cloud-native software portfolio.

Competenze

• 5+ years of experience in application security, product security, or security engineering
• 8+ years of overall industry experience preferred
• Secure design and risk assessment expertise including threat modeling
• Vulnerability management skills based on exploitability and business impact
• Knowledge of OWASP Top 10, CWE, CVSS, and secure software development principles

Mansioni

• Embed security throughout the PDLC for Vault, Boundary, and Radar
• Act as security SME for Vault, Radar, Boundary and communicate with security teams
• Conduct architecture and threat modeling reviews for new products and features
• Provide guidance on secure design patterns, controls and remediation strategies
• Lead vulnerability triage, risk assessment, and remediation prioritization
• Participate in security incident response and post-incident improvements
• Develop AI-assisted security tooling and automation to improve triage and review processes

Conoscenze

Threat modeling

Architecture reviews

Vulnerability management

Application security

Go/Python/Rust

Security communications

Incident response

Formazione

Bachelor's degree preferred

High School Diploma/GED required

Strumenti

Vault

Boundary

Radar

Terraform

Consul

Descrizione del lavoro

IBM is seeking a Senior Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams, embedding security into the product development lifecycle. You will conduct threat modeling, architecture reviews, and vulnerability assessments, guiding secure design and remediation.

Strong collaboration with Product Security and Operations is essential to protect our AI-powered, cloud-native software portfolio.