Senior Product Security Engineer: Vault & AI Security

International Business Machines Corporation; Lowell (MA); On-site; USD 120,000 - 170,000; Full time

Job summary

IBM Software is seeking a Product Security Engineer to embed security across the Product Development Lifecycle for Vault, Boundary, and Radar. You will partner with engineering teams to drive secure design, threat modeling, and vulnerability response while maintaining collaboration with Product Management and Security Operations.

The role demands 5+ years in security engineering and solid Go/Python/Rust skills, with deep experience in vulnerability management and secure-by-design practices.

Qualifications

• 5+ years of experience in application security, product security, or security engineering; 8+ years overall preferred.
• Expertise in threat modeling, architecture reviews, security design reviews, and vulnerability assessments.
• Strong knowledge of OWASP Top 10, CWE, CVSS and secure software development practices.
• Proficiency in Go, Python, or Rust; understanding authentication, authorization, encryption, PKI, and secret management.

Responsibilities

• Partner with Vault, Boundary, and Radar engineering teams to embed security throughout the PDLC.
• Serve as security SME for Vault, Radar, Boundary, and coordinate vulnerability disclosure and customer communications.
• Conduct architecture/design reviews, threat modeling, and security assessments for new products and features.
• Provide guidance on secure design patterns, defenses, and remediation strategies.
• Promote secure-by-design engineering practices and security standards across teams.
• Assess vulnerabilities, perform risk assessment and remediation prioritization.
• Assist in security incident response and post-incident improvements.
• Contribute to automation and AI-assisted security tooling for vulnerability triage and remediation.

Skills

Go

Python

Rust

Threat modeling

Security design reviews

OWASP Top 10

Education

Bachelor's degree in Computer Science

Cybersecurity

Software Engineering

Tools

HashiCorp Vault

Boundary

Radar

Consul

Terraform

Job description

IBM Software is seeking a Product Security Engineer to embed security across the Product Development Lifecycle for Vault, Boundary, and Radar. You will partner with engineering teams to drive secure design, threat modeling, and vulnerability response while maintaining collaboration with Product Management and Security Operations.

The role demands 5+ years in security engineering and solid Go/Python/Rust skills, with deep experience in vulnerability management and secure-by-design practices.