Senior Product Security Engineer – Vault & AI Security

International Business Machines Corporation; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) plan

Paid time off

Job summary

IBM Software is seeking a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams, embedding security throughout the Product Development Lifecycle and helping teams build secure-by-design products.

You will lead threat modeling, architecture reviews, vulnerability assessments, and provide actionable guidance on secure design patterns and remediation strategies, collaborating across Product Management, Engineering, and Security Operations.

Qualifications

• 5+ years of experience in application security, product security, or security engineering.
• Secure Design & Risk Assessment: threat modeling, architecture reviews, security design reviews.
• Vulnerability Management: triage, prioritization based on exploitability and business impact.
• Application Security Expertise: OWASP Top 10, CWE, CVSS, secure SDLC.
• Technical foundations: Go, Python, or Rust; authentication, authorization, encryption, PKI, identity, secrets management.

Responsibilities

• Partner with Vault, Boundary, and Radar engineering teams to embed security in the PDLC.
• Serve as security SME for Vault, Radar, Boundary; coordinate vulnerability disclosure and security communications.
• Conduct architecture, design reviews, threat modeling, and security assessments for new products and features.
• Provide guidance on secure design patterns, defense-in-depth, security controls, and remediation strategies.
• Promote secure-by-design engineering practices and security standards across teams.
• Assess vulnerabilities, conduct risk assessment, determine severity, and prioritize remediation.
• Collaborate with engineering to develop fixes, review remediation plans, and validate improvements.
• Participate in security incident response activities, including investigation and post-incident improvements.
• Contribute to automation and AI-assisted security tooling to improve triage and remediation efficiency.

Skills

Experience in app security

Threat modeling

Secure design practices

Security communications

Security governance

Education

High School Diploma/GED

Bachelor's Degree

Tools

Go

Python

Rust

HashiCorp Vault

Vault/Boundary/Radar

Job description

IBM Software is seeking a Product Security Engineer to partner with Vault, Boundary, and Radar engineering teams, embedding security throughout the Product Development Lifecycle and helping teams build secure-by-design products.

You will lead threat modeling, architecture reviews, vulnerability assessments, and provide actionable guidance on secure design patterns and remediation strategies, collaborating across Product Management, Engineering, and Security Operations.