Senior Product Security Engineer - Secure-by-Design AI/Cloud

International Business Machines Corporation; Rochester (MN); On-site; USD 120,000 - 180,000; Full time

Job summary

IBM Software is seeking a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams, embedding security throughout the PDLC and helping build secure-by-design products.

The ideal candidate has deep application security expertise and strong software development skills in Go, Python, and Rust, with the ability to collaborate across Product Management, Engineering, and Security Operations.

Qualifications

• 5+ years in application or product security
• Experience with threat modeling and security reviews
• Strong knowledge of OWASP Top 10 and CVSS

Responsibilities

• Partner with Vault, Boundary, and Radar engineering to embed security in the PDLC.
• Serve as the security SME for Vault, Radar, Boundary with central teams on vulnerability disclosure and security communications.
• Conduct architecture reviews, design reviews, threat modeling, and security assessments for new products and initiatives.
• Provide guidance on secure design patterns, defensive architectures, and remediation strategies.
• Help establish secure-by-design engineering practices and security standards for products.
• Assess vulnerabilities, including validation, exploitability analysis, risk assessment, and remediation prioritization.
• Collaborate to identify workarounds, develop fixes, and validate security improvements.
• Participate in security incident response activities including investigation and containment planning.
• Assist in building AI-assisted security tooling and automation to scale vulnerability triage and remediation.
• Contribute to automation and process improvements that reduce security response time.

Skills

Threat modeling

Architecture reviews

Vulnerability assessment

Secure software development

Education

Bachelor's degree in CS / Cybersecurity

Tools

Go

Python

Rust

Job description

IBM Software is seeking a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams, embedding security throughout the PDLC and helping build secure-by-design products.

The ideal candidate has deep application security expertise and strong software development skills in Go, Python, and Rust, with the ability to collaborate across Product Management, Engineering, and Security Operations.