Senior Product Security Engineer

Red Hat; Raleigh (NC); Remote; USD 131,000 - 217,000; Full time

Job summary

Join a forward-thinking company as a Senior Product Security Engineer, where you'll play a vital role in safeguarding products and services. Collaborate with a global team to assess vulnerabilities, communicate risks to stakeholders, and drive innovation in security practices. This role offers the opportunity to shape industry standards while working in a culture that values creativity and inclusion. If you're passionate about security and eager to make an impact in a dynamic environment, this is the perfect opportunity for you.

Benefits

Comprehensive medical, dental, and vision coverage

Flexible Spending Account

Health Savings Account

Retirement 401(k) with employer match

Paid time off and holidays

Paid parental leave

Employee stock purchase plan

Tuition reimbursement

Transportation expense account

Employee assistance program

Qualifications

• 5+ years of experience in product security and vulnerability management.
• Strong understanding of security technologies and methodologies.

Responsibilities

• Respond to security vulnerabilities and incidents within the product portfolio.
• Provide technical leadership and mentor junior engineers.

Skills

Linux Operating System

C/C++

Python

Java

Go

Git

Security Vulnerabilities

Authentication and Authorization

Encryption

Risk Assessments

Education

Bachelor's Degree in Computer Science or related field

Tools

Kubernetes

OpenShift

Docker

Job description

Senior Product Security Engineer page is loaded

Senior Product Security Engineer

Apply remote type Remote locations Remote US TX Remote US WI Boston Raleigh Remote US MI time type Full time posted on Posted Yesterday job requisition id R-046548

Red Hat Product Security is looking for a Senior Product Security Engineer to join our global Vulnerability Management Team. Red Hat’s Vulnerability Management Team responds to threats in a predictable manner that reduces risk to Red Hat portfolio and customers. We do this by identifying, assessing & mitigating all potential vulnerabilities and weaknesses that impact our Products and Services portfolio, and then orchestrating our response, by coordinating with the stakeholders. In this role, you will work closely with the Vulnerability Remediation Engineers, Security Architects, Product Managers and Developers, performing risk assessment of the vulnerabilities affecting Red Hat portfolio, and crafting the vulnerability metadata supporting our key stakeholders.

Primary Responsibilities

• Respond to security vulnerabilities, weaknesses and incidents, within the Red Hat portfolio of Products and Services.
• 5+ years Product Security Experience
• Contribute to customer facing security documentation, reference, and other data as used by the Common Vulnerabilities and Exposures (CVE) pages.
• Research the impact of new flaws affecting Red Hat's offerings and communicate risk to stakeholders with different technical understanding, like senior leadership, engineers, architects, etc.
• Coordinate with key stakeholders internally and externally, as appropriate, ensuring an effective management of the vulnerabilities and the security incidents
• Provide technical leadership, mentor junior engineers, and drive collaboration to deliver high-impact solutions while fostering a culture of innovation and excellence.
• Contribute in the industry coordination working groups to shape the industry wide vulnerability disclosure and coordination standards as well as to adopt and implement those standards within the organization

Required Skills

• Experienced knowledge and understanding of Linux Operating System
• Proficiency in common programming languages like C/C++, Python, Java, Go
• Familiarity with Source Code Management tools like Git
• Strong understanding of security vulnerabilities including the confidentiality, integrity, and availability triad
• Significant experience in security technologies and methodologies like authentication and authorization, encryption, and risk assessments
• Ability to work on your own in a fast-paced environment with a multicultural team distributed across multiple countries and time zones
• Outstanding written and verbal communication skills in English

The following are considered are plus:

• Experience on Secure SDL tools and technologies like pentesting, threat modeling, etc.
• Knowledge and experience with modern container technologies: Kubernetes, Openshift; comfortable with docker/Linux containers.
• Familiarity with open source software and open source as a business model.

The salary range for this position is $131,420.00 - $216,870.00. Actual offer will be based on your qualifications.

Pay Transparency

Red Hat determines compensation based on several factors including but not limited to job location, experience, applicable skills and training, external market value, and internal pay equity. Annual salary is one component of Red Hat’s compensation package. This position may also be eligible for bonus, commission, and/or equity. For positions with Remote-US locations, the actual salary range for the position may differ based on location but will be commensurate with job duties and relevant work experience.

About Red Hat

Red Hat is the world’s leading provider of enterprise open source software solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. Spread across 40+ countries, our associates work flexibly across work environments, from in-office, to office-flex, to fully remote, depending on the requirements of their role. Red Hatters are encouraged to bring their best ideas, no matter their title or tenure. We're a leader in open source because of our open and inclusive environment. We hire creative, passionate people ready to contribute their ideas, help solve complex problems, and make an impact.

Benefits
● Comprehensive medical, dental, and vision coverage
● Flexible Spending Account - healthcare and dependent care
● Health Savings Account - high deductible medical plan
● Retirement 401(k) with employer match
● Paid time off and holidays
● Paid parental leave plans for all new parents
● Leave benefits including disability, paid family medical leave, and paid military leave
● Additional benefits including employee stock purchase plan, family planning reimbursement, tuition reimbursement, transportation expense account, employee assistance program, and more!

Note: These benefits are only applicable to full time, permanent associates at Red Hat located in the United States.

Inclusion at Red Hat
Red Hat’s culture is built on the open source principles of transparency, collaboration, and inclusion, where the best ideas can come from anywhere and anyone. When this is realized, it empowers people from different backgrounds, perspectives, and experiences to come together to share ideas, challenge the status quo, and drive innovation. Our aspiration is that everyone experiences this culture with equal opportunity and access, and that all voices are not only heard but also celebrated. We hope you will join our celebration, and we welcome and encourage applicants from all the beautiful dimensions that compose our global village.

Equal Opportunity Policy (EEO)
Red Hat is proud to be an equal opportunity workplace and an affirmative action employer. We review applications for employment without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, age, veteran status, genetic information, physical or mental disability, medical condition, marital status, or any other basis prohibited by law.