Senior Product Security Engineer: Secure-by-Design Leader

International Business Machines Corporation; Bellevue (WA); On-site; USD 140,000 - 190,000; Full time

Job summary

IBM Software in Bellevue is seeking a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams. You will embed security into the Product Development Lifecycle, perform threat modeling, and guide secure design decisions.

Qualified candidates have extensive experience in application security, vulnerability management, and strong coding skills in Go, Python, or Rust, with collaboration across PM, Engineering, Security Operations, and Product Security teams.

Qualifications

• 5+ years in application/product security; 8+ years total preferred.
• Threat modeling, architecture reviews, and vulnerability assessment expertise.
• Strong OWASP Top 10, CWE, CVSS, and secure SDLC knowledge.

Responsibilities

• Embed security across the product lifecycle with Vault, Boundary, and Radar.
• Lead security reviews, risk assessments, and remediation guidance for new features.
• Collaborate with PM, Eng, and Security teams to drive secure-by-design practices.
• Support incident response and vulnerability disclosure processes.

Skills

Application security

Threat modeling

Vulnerability management

Go

Python

Rust

Security engineering

Secure design

Education

Bachelor's degree

Tools

Vault

Boundary

Radar

Terraform

CI/CD security

Job description

IBM Software in Bellevue is seeking a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams. You will embed security into the Product Development Lifecycle, perform threat modeling, and guide secure design decisions.

Qualified candidates have extensive experience in application security, vulnerability management, and strong coding skills in Go, Python, or Rust, with collaboration across PM, Engineering, Security Operations, and Product Security teams.