Remote Product Security Architect — Kubernetes & Cloud

Hitachi - Vantara; United States; Remote; USD 130,000 - 160,000; Full time

Job summary

Hitachi Vantara is hiring a Product Security Architect for the VSP One Object/File platform. You will provide hands-on security expertise across Kubernetes, object/file storage, APIs, and networking, driving threat modeling, security architecture, and remediation planning.

You will partner with Engineering and Product Management to translate risks into concrete security controls and design improvements, and you will support security advisories and SBOM/SCA analysis as required.

Qualifications

• 5+ years in product, app, cloud, container, infra security, or pen testing.
• Strong experience securing Kubernetes-based, containerized platforms.
• Deep knowledge of Kubernetes, Linux, network and API security.
• Experience with S3-compatible storage, multitenancy, data-protection boundaries.
• Ability to investigate CVEs and determine product applicability and impact.
• Review code, Kubernetes YAML, Helm charts, SBOMs and dependencies.
• Hands-on testing and vulnerability validation with listed tools.
• Excellent written and verbal communication to explain risks.
• Certs such as CKS, OSCP, GPEN or CISSP preferred.

Responsibilities

• Provide hands-on security expertise across Kubernetes, storage services, APIs, and interfaces.
• Lead threat modeling and security architecture assessments.
• Investigate CVEs for applicability and exploitability.
• Perform targeted security testing and validate remediation.
• Translate risks into clear engineering recommendations and controls.
• Support security advisories, SBOM/SCA analysis, and customer inquiries.

Skills

Product security

Cloud security

Kubernetes security

Penetration testing

Threat modeling

Security architecture

SBOM/SCA analysis

Tools

kubectl

Trivy

Grype

Burp Suite

OpenSSL

Nmap

Job description

Hitachi Vantara is hiring a Product Security Architect for the VSP One Object/File platform. You will provide hands-on security expertise across Kubernetes, object/file storage, APIs, and networking, driving threat modeling, security architecture, and remediation planning.

You will partner with Engineering and Product Management to translate risks into concrete security controls and design improvements, and you will support security advisories and SBOM/SCA analysis as required.