Senior Product Security Engineer - Cloud & Enterprise

International Business Machines Corporation; Austin, New York, Lowell (TX, NY, MA); Hybride; USD 124 000 - 214 000; Plein temps

Avantages offerts par ce poste

Healthcare benefits

401(k) plan

Paid time off

Résumé du poste

International Business Machines Corporation (IBM) is seeking a Senior Product Security Engineer II to help scale our security program across HashiCorp-heritage products. You will work with multiple engineering teams to embed security into the lifecycle, perform threat modeling, design reviews, and risk assessments for cloud-based and on-prem solutions.

The role emphasizes secure architecture, penetration testing collaboration, and participation in audits and bug bounty programs, with a hybrid

Qualifications

• 8+ years of product security experience.
• Strong security architecture expertise including threat modeling and risk assessment.
• Deep cloud security knowledge across AWS, Azure and/or GCP in multi-tenant SaaS/IaaS/PaaS environments.
• Hands-on application and infrastructure security experience, including secure development practices and vulnerability management.
• Broad security program expertise including IAM, cryptography, audits, vulnerability disclosure, and bug bounty programs.

Responsabilités

• Contribute to secure architecture and design across IBM HashiCorp product portfolio.
• Collaborate with R&D teams to prioritize security features and mitigations.
• Monitor threats and vulnerabilities; triage and communicate risk.
• Lead security assessments, threat modeling, and code review.
• Support 3rd-party audits, pen tests, and bug bounty efforts.
• Develop security tooling and CI/CD integrations; deliver security training.

Connaissances

8+ years in product security

Security architecture

Cloud security

Application security

Vulnerability management

Threat modeling

CI/CD security

Formation

Bachelor's Degree

Outils

Go language

CI/CD pipelines

Description du poste

International Business Machines Corporation (IBM) is seeking a Senior Product Security Engineer II to help scale our security program across HashiCorp-heritage products. You will work with multiple engineering teams to embed security into the lifecycle, perform threat modeling, design reviews, and risk assessments for cloud-based and on-prem solutions.

The role emphasizes secure architecture, penetration testing collaboration, and participation in audits and bug bounty programs, with a hybrid