Senior Product Security Engineer: Vault & Cloud Security

International Business Machines Corporation; Armonk (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

IBM Software in the United States seeks a Product Security Engineer to embed security across the PDLC for Vault, Boundary, and Radar, collaborating with engineering to build secure-by-design products and respond to vulnerabilities.

You will work with Product Management, Engineering, Product Security, and Security Operations to drive secure design patterns and remediation strategies, while advancing automation and security tooling.

Qualifications

• 5+ years of experience in application security, product security, or security engineering.
• Threat modeling, architecture reviews, security design reviews, and vulnerability assessments.
• Experience identifying, triaging, prioritizing, and assessing vulnerabilities.
• Knowledge of OWASP Top 10, CWE, CVSS and secure software development practices.
• Proficiency in Go, Python, or Rust; understanding authentication, authorization, encryption, PKI, and secrets management.

Responsibilities

• Partner with Vault, Boundary, and Radar engineering teams to embed security throughout the PDLC and improve security posture.
• Serve as the security SME for Vault, Radar, Boundary and collaborate on vulnerability disclosure and security communications.
• Conduct architecture reviews, design reviews, threat modeling, and security assessments for new products and features.
• Provide actionable guidance on secure design patterns, defense-in-depth architectures, and remediation strategies.
• Promote secure-by-design engineering practices, security standards, and product-specific security best practices.
• Assess vulnerabilities, validation, exploitability analysis, risk assessment, and remediation prioritization.
• Collaborate with engineering teams to identify workarounds, fixes, and validate improvements.
• Participate in security incident response activities including investigation and post-incident improvements.
• Assist in building AI-assisted security tooling and automation to scale vulnerability triage and remediation.
• Contribute to automation and process improvements that reduce security response time.

Skills

Threat modeling

Architecture reviews

Vulnerability assessment

OWASP Top 10

Go

Python

Rust

Security engineering

Education

Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or equivalent

Tools

Vault

Boundary

Radar

Consul

Terraform

Job description

IBM Software in the United States seeks a Product Security Engineer to embed security across the PDLC for Vault, Boundary, and Radar, collaborating with engineering to build secure-by-design products and respond to vulnerabilities.

You will work with Product Management, Engineering, Product Security, and Security Operations to drive secure design patterns and remediation strategies, while advancing automation and security tooling.