Senior Product Security Engineer — Vault & AI Security

International Business Machines Corporation; Tucson (AZ); On-site; USD 120,000 - 180,000; Full time

Job summary

IBM Software seeks a Product Security Engineer to embed security across the Product Development Lifecycle for Vault, Boundary, and Radar. You’ll partner with engineering, product security, and security operations to build secure-by-design products and respond to vulnerabilities.

The role requires 5+ years in application/product security, strong threat modeling, and hands-on experience with Go/Python/Rust and HashiCorp tooling. Collaboration with multiple teams is essential.

Qualifications

• 5+ years in application security, product security, or security engineering.
• Threat modeling, architecture reviews, security design reviews, and vulnerability assessments.
• Experience identifying, triaging, prioritizing, and assessing vulnerabilities.
• Strong knowledge of OWASP Top 10, CWE, CVSS and secure software development.
• Proficiency in Go, Python, or Rust; understand authentication, authorization, encryption, PKI, and secrets management.

Responsibilities

• Embed security in the PDLC with Vault, Boundary, and Radar engineering teams.
• Act as security SME for Vault, Radar, Boundary and coordinate vulnerability disclosure and advisories.
• Conduct architecture and design reviews and threat modeling for new products and initiatives.
• Provide guidance on secure design patterns, security controls, and remediation strategies.
• Promote secure-by-design practices and establish security standards across teams.
• Assess internally discovered and external vulnerabilities, determine risk and remediation priority.
• Collaborate to identify workarounds, fixes, and validate security improvements.
• Participate in security incident response, containment, and post-incident review.
• Assist in building AI-assisted security tooling and automation to scale triage and remediation.
• Contribute to automation that reduces response time and increases engineering productivity.

Skills

Threat modeling

Architecture reviews

Vulnerability management

OWASP Top 10

Go

Python

Rust

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

HashiCorp Vault

HashiCorp Boundary

Terraform

Radar

Kubernetes

Job description

IBM Software seeks a Product Security Engineer to embed security across the Product Development Lifecycle for Vault, Boundary, and Radar. You’ll partner with engineering, product security, and security operations to build secure-by-design products and respond to vulnerabilities.

The role requires 5+ years in application/product security, strong threat modeling, and hands-on experience with Go/Python/Rust and HashiCorp tooling. Collaboration with multiple teams is essential.