Product Security Engineer: Secure-by-Design & Vault

International Business Machines Corporation; Raleigh (NC); On-site; USD 120,000 - 150,000; Full time

Job summary

IBM Software is seeking a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams, embedding security across the Product Development Lifecycle. The role combines strong application security expertise with software engineering skills and cross-team collaboration.

The ideal candidate will conduct threat modeling, architecture reviews, and security assessments, provide secure design guidance, and help implement secure-by-design practices across products and platforms.

Qualifications

• 5+ years in application security, product security, or security engineering; 8+ years total experience preferred.
• Threat modeling, architecture reviews, security design reviews, vulnerability assessments.
• Experience identifying, triaging, prioritizing vulnerabilities by exploitability and impact.
• Knowledge of OWASP Top 10, CWE, CVSS, secure software development principles.
• Proficiency in Go, Python, or Rust; understanding authentication, authorization, encryption, PKI and secrets management.

Responsibilities

• Embed security across the PDLC with Vault, Boundary, and Radar engineering teams.
• Act as security SME for Vault, Radar, Boundary; coordinate disclosures and advisories.
• Conduct architecture reviews, threat modeling, and security assessments for products and platforms.
• Provide guidance on secure design patterns, controls, and remediation strategies.
• Promote secure-by-design practices and security standards across teams.
• Assess vulnerabilities, validate findings, and help prioritize remediations.
• Support incident response activities and post-incident improvements.
• Contribute to AI-assisted security tooling and automation to improve triage and response.

Skills

Threat modeling

Secure design

Vulnerability assessment

Security engineering

Go/Python/Rust

Education

Bachelor's Degree

Tools

Go

Python

Rust

OWASP

Job description

IBM Software is seeking a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams, embedding security across the Product Development Lifecycle. The role combines strong application security expertise with software engineering skills and cross-team collaboration.

The ideal candidate will conduct threat modeling, architecture reviews, and security assessments, provide secure design guidance, and help implement secure-by-design practices across products and platforms.