Senior Product Security Engineer II — Secure Architecture

HashiCorp; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

HashiCorp in San Francisco invites a Senior Product Security Engineer to scale our product security function, partnering with R&D teams to address security across the HashiCorp cloud, self-managed, and community products.

You will contribute to secure architecture and design, prioritize security features and mitigations, monitor threats, perform threat modeling, audits, and bug bounty support, and help deliver security training across the product lifecycle.

Responsibilities

• Contribute to secure architecture and design of HashiCorp products, across our cloud, self-managed, and community product portfolio.
• Work across various R&D teams to prioritize security features and bugs, and ensure implementation and mitigations.
• Monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations and assess/communicate associated risk.
• Act as SME on multiple information security areas (e.g. security architecture, application security, threat modeling etc.).
• Plan & execute security assessments (dynamic testing, static testing, code review, etc) and threat modeling of HashiCorp’s products, services, and associated cloud infrastructure.
• Assist in execution of 3rd-party audits, penetration tests, and bug bounty programs.
• Contribute to the development of security solutions across the product life-cycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc.
• Contribute to the creation and delivery of security training.
• Research emerging attack vectors and techniques.

Job description

HashiCorp in San Francisco invites a Senior Product Security Engineer to scale our product security function, partnering with R&D teams to address security across the HashiCorp cloud, self-managed, and community products.

You will contribute to secure architecture and design, prioritize security features and mitigations, monitor threats, perform threat modeling, audits, and bug bounty support, and help deliver security training across the product lifecycle.