Remote Product Security Architect (Kubernetes)

HITACHI VANTARA LLC; Denver, Boulder (CO, CO); Hybrid; USD 130,000 - 160,000; Full time

Benefits offered by this job

Bonus program

Job summary

Hitachi Vantara is seeking a Product Security Architect to safeguard Kubernetes infrastructure, object/file storage, APIs, and management interfaces. You will lead threat modeling, assess security architecture, and translate risks into actionable engineering recommendations.

Collaboration with Engineering and Product Management is essential. Qualified candidates will review code, SBOMs, and dependencies, perform penetration testing, and support security advisories and compliance requirements.

Qualifications

• 5+ years of hands‑on experience in product, application, cloud, container, infrastructure security, or penetration testing.
• Strong experience securing Kubernetes-based, containerized, storage, or complex distributed platforms.
• Deep understanding of Kubernetes, Linux, network and API security, authentication and authorization, secrets management, TLS/mTLS, encryption, and key management.
• Experience assessing object and/or file storage, including S3-compatible interfaces, access controls, multitenancy, and data‑protection boundaries.
• Proven ability to investigate CVEs and determine product applicability, reachability, exploitability, and actual customer impact.
• Ability to review source code, Kubernetes YAML, Helm charts, scripts, configurations, SBOMs, and third‑party dependencies from a security perspective.
• Hands‑on penetration testing and vulnerability validation experience using tools such as kubectl, Trivy, Grype, Burp Suite, OpenSSL, and Nmap.
• Ability to develop proof‑of‑concept tests, reproduce vulnerabilities, and independently verify remediation.
• Strong written and verbal communication skills, with the ability to translate security risks into clear, actionable engineering recommendations.
• Certifications such as CKS, OSCP, GPEN, or CISSP are preferred, with demonstrated hands‑on security expertise valued above certification alone.

Responsibilities

• Lead threat modeling and security architecture assessments for Kubernetes infrastructure, object/file storage, APIs, and management interfaces.
• Investigate CVEs for applicability and exploitability; perform targeted security testing and validate remediation.
• Translate complex security risks into clear, actionable engineering recommendations, security controls, and design improvements.
• Partner with Engineering to identify root causes and attack paths; communicate risk and remediation priorities to stakeholders.
• Support security advisories, SBOM/SCA analysis, customer security inquiries, and applicable security and regulatory requirements.

Skills

Product Security

Threat modeling

Kubernetes security

Security architecture

Vulnerability testing

Threat assessment

Communication

Root-cause analysis

Tools

kubectl

Trivy

Grype

Burp Suite

OpenSSL

Nmap

Job description

Hitachi Vantara is seeking a Product Security Architect to safeguard Kubernetes infrastructure, object/file storage, APIs, and management interfaces. You will lead threat modeling, assess security architecture, and translate risks into actionable engineering recommendations.

Collaboration with Engineering and Product Management is essential. Qualified candidates will review code, SBOMs, and dependencies, perform penetration testing, and support security advisories and compliance requirements.