Senior Product Security Engineer - Secure-by-Design Leader

International Business Machines Corporation; Armonk (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

IBM is seeking a Product Security Engineer to partner with engineering teams responsible for Vault, Boundary, and Radar. You will be embedded in the PDLC to help build secure-by-design products, identify risks, and respond to vulnerabilities and incidents.

The role requires 5+ years in security, expertise in threat modeling, architecture reviews, and vulnerability management, with Go/Python/Rust proficiency and HashiCorp tech experience.

Qualifications

• 5+ years of experience in application security, product security, or security engineering.
• Secure Design & Risk Assessment: threat modeling, architecture reviews, security design reviews.
• Vulnerability management: triage, prioritization based on exploitability & business impact.
• Application Security: OWASP Top 10, CWE, CVSS, secure software development.
• Proficiency in Go, Python, or Rust; strong authentication, authorization, encryption, PKI, identity, secrets management.

Responsibilities

• Partner with Vault, Boundary, and Radar engineering teams to embed security in the PDLC.
• Serve as security SME for Vault, Radar, Boundary; coordinate vulnerability disclosure & advisories.
• Conduct architecture reviews, threat modeling, threat assessments for new products.
• Provide guidance on secure design patterns, controls, and remediation strategies.
• Promote secure-by-design engineering practices and security standards.
• Assess discovered and reported vulnerabilities; perform risk, severity, and remediation prioritization.
• Collaborate with teams to identify fixes, review remediation plans, validate improvements.
• Participate in security incident response activities and post-incident improvements.

Skills

Threat modeling

Architecture reviews

Vulnerability assessment

Secure coding practices

Go/Python/Rust

Education

Bachelor's Degree

Tools

Vault

Boundary

Radar

Consul

Terraform

Job description

IBM is seeking a Product Security Engineer to partner with engineering teams responsible for Vault, Boundary, and Radar. You will be embedded in the PDLC to help build secure-by-design products, identify risks, and respond to vulnerabilities and incidents.

The role requires 5+ years in security, expertise in threat modeling, architecture reviews, and vulnerability management, with Go/Python/Rust proficiency and HashiCorp tech experience.