Senior Product Security Engineer: Secure-by-Design & AI Tools

International Business Machines Corporation; Austin (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

IBM Software in Austin seeks a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams. You will embed security across the Product Development Lifecycle, guiding secure design and vulnerability response while collaborating with Product Management, Engineering, and Security Operations.

The ideal candidate brings 5+ years in application or product security, deep threat modeling, and hands-on security tooling knowledge.

Qualifications

• 5+ years in application security or security engineering or product security.
• Expertise in threat modeling, architecture reviews, and vulnerability assessments.
• Strong knowledge of secure software development and CVSS, CWE references.

Responsibilities

• Partner with Vault, Boundary, and Radar engineering teams to embed security in the PDLC.
• Serve as security SME for Vault, Radar, Boundary with central Product Security and Security Operations teams.
• Conduct architecture reviews, threat modeling, and security assessments for new products and features.
• Provide guidance on secure design patterns, defense-in-depth, and remediation strategies.
• Promote secure-by-design practices and product-specific security standards.
• Assess vulnerabilities, including validation, exploitability analysis, risk assessment, and prioritization.
• Collaborate to develop fixes, remediation plans, and validate improvements.
• Participate in security incident response activities and post-incident improvements.
• Assist in building AI-assisted security tooling and automation to scale triage and remediation.
• Contribute to automation to reduce security response time and boost engineering productivity.

Skills

Application security

Threat modeling

Vulnerability management

OWASP Top 10

Go

Python

Rust

Education

Bachelor's degree in Computer Science/Cybersecurity/Software Engineering

Tools

Vault

Boundary

Consul

Terraform

Radar

Job description

IBM Software in Austin seeks a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams. You will embed security across the Product Development Lifecycle, guiding secure design and vulnerability response while collaborating with Product Management, Engineering, and Security Operations.

The ideal candidate brings 5+ years in application or product security, deep threat modeling, and hands-on security tooling knowledge.