Senior Product Security Engineer: Secure-by-Design

International Business Machines Corporation; Tucson (AZ); On-site; USD 140,000 - 190,000; Full time

Job summary

IBM is seeking a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams to secure product development. You will lead threat modeling, architecture reviews, and vulnerability assessments to drive secure-by-design outcomes.

Join a collaborative security organization that integrates across Product Management, Engineering, and Security Operations, shaping secure software for a global AI-powered portfolio.

Qualifications

• 5+ years in application/product security or security engineering.
• 8+ years total industry experience preferred.
• Expertise in threat modeling and security design reviews.
• Strong knowledge of OWASP Top 10, CWE, CVSS and secure SDLC.

Responsibilities

• Embed security across the PDLC with Vault, Boundary, and Radar.
• Serve as security SME for Vault, Radar, Boundary and coordinate with security teams.
• Conduct architecture reviews, threat modeling, and security assessments for new products.
• Provide guidance on secure design patterns and remediation strategies.
• Promote secure-by-design practices and security standards.
• Assess vulnerabilities, determine risk, and prioritize remediation.
• Collaborate with teams to implement fixes and verify improvements.
• Participate in security incident response and post-incident reviews.
• Contribute to automation for vulnerability triage and security reviews.

Skills

Threat modeling

Security design

Vulnerability assessment

OWASP Top 10

Go

Python

Rust

IAM & Secrets

PKI & encryption

Education

Bachelor's degree in Computer Science or related

Tools

HashiCorp Vault

HashiCorp Boundary

HashiCorp Terraform

HashiCorp Radar

HashiCorp Consul

Job description

IBM is seeking a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams to secure product development. You will lead threat modeling, architecture reviews, and vulnerability assessments to drive secure-by-design outcomes.

Join a collaborative security organization that integrates across Product Management, Engineering, and Security Operations, shaping secure software for a global AI-powered portfolio.