Senior Product Security Engineer

HashiCorp; Richland (WA); On-site; USD 140,000 - 190,000; Full time

Job summary

HashiCorp's Secure Lifecycle Management (SLM) organization seeks a Product Security Engineer to partner with Vault, Boundary, and Radar teams. Embedded in engineering, you act as a trusted security advisor across the Product Development Lifecycle, helping teams build secure‑by‑design products and respond to vulnerabilities and incidents.

The role blends application and product security expertise with software engineering skills, collaborating with Product Management, Engineering, Product

Responsibilities

• Partner directly with Vault, Boundary, and Radar engineering teams to embed security throughout the PDLC.

Job description

The Secure Lifecycle Management (SLM) organization is seeking a Product Security Engineer to partner closely with the engineering teams responsible for HashiCorp Vault, Boundary, and Radar. This role is embedded directly within the engineering organization and serves as a trusted security advisor throughout the Product Development Lifecycle (PDLC), helping teams build secure-by-design products, proactively identify risks, and respond effectively to security vulnerabilities and incidents. The ideal candidate combines deep application and product security expertise with strong software engineering skills and the ability to collaborate across Product Management, Engineering, Product Security, and Security Operations teams.

Roles and Responsibilities

• Partner directly with Vault, Boundary, and Radar engineering teams to embed security throughout the PDLC and improve the security posture of new and existing capabilities.
• Serve as the security SME for Vault, Radar, Boundary and work closely with central Product Security, and Security Operations teams on coordinated vulnerability disclosure, security advisories, and customer-facing security communications.
• Conduct architecture reviews, design reviews, threat modeling, and security assessments for new products, features, and platform initiatives.
• Provide actionable guidance to engineering teams on secure design patterns, defensive architectures, security controls, and remediation strategies.
• Help establish and promote secure-by-design engineering practices, security standards, and product-specific security best practices.
• Assess internally discovered and externally reported security vulnerabilities, including validation, exploitability analysis, risk assessment, severity determination, and remediation prioritization.
• Collaborate with engineering teams to identify workarounds, develop fixes, review remediation plans, and validate security improvements.
• Participate in security incident response activities, including investigation, impact assessment, containment planning, root cause analysis, and post-incident improvements.
• Assist in building and prototyping AI-assisted security tooling, workflows, and skills that improve the scale and efficiency of vulnerability triage, assessment, remediation, and security review activities.
• Contribute to automation and process improvements that reduce security response time and improve engineering productivity.