Remote Product Security Architect – Kubernetes & Storage

hitachi; United States; Remote; USD 130,000 - 160,000; Full time

Benefits offered by this job

Remote within the United States

Job summary

Hitachi is seeking a remote Security Engineer to provide hands-on security guidance for a Kubernetes-based storage platform. You will assess architecture, investigate vulnerabilities, validate fixes, and collaborate with engineering on design improvements.

Requirements include 5+ years in product or cloud security, strong Kubernetes/container security expertise, and experience with kubectl, Trivy, Grype, Burp Suite, OpenSSL, and Nmap.

Qualifications

• 5+ years hands-on experience in product, application, cloud, container, infrastructure security or penetration testing.
• Strong experience with Kubernetes-based, containerized, storage, or distributed platforms.
• Deep understanding of Kubernetes, Linux, network and API security, authentication/authorization, secrets, TLS/mTLS, encryption, and key management.

Responsibilities

• Lead threat modeling and security architecture reviews across infrastructure, storage services, APIs, management interfaces, and data protection.
• Assess CVEs for product applicability, reachability, exploitability, and potential customer impact.
• Conduct focused security testing, reproduce vulnerabilities, develop proof-of-concept tests, and independently verify remediation.
• Review source code, Kubernetes manifests, Helm charts, scripts, configurations, SBOM/SCA analysis, and third‑party dependencies.
• Work with engineering to identify root causes and attack paths and recommend clear security controls and design changes.
• Support security advisories, SBOM/SCA analysis, customer security questions, and relevant compliance requirements.

Skills

Kubernetes security

Penetration testing

Cloud security

Threat modeling

Security architecture reviews

Root cause analysis

Security communication

Tools

kubectl

Trivy

Grype

Burp Suite

OpenSSL

Nmap

Job description

Hitachi is seeking a remote Security Engineer to provide hands-on security guidance for a Kubernetes-based storage platform. You will assess architecture, investigate vulnerabilities, validate fixes, and collaborate with engineering on design improvements.

Requirements include 5+ years in product or cloud security, strong Kubernetes/container security expertise, and experience with kubectl, Trivy, Grype, Burp Suite, OpenSSL, and Nmap.