Product Security Engineer II - Partnerships - Remote

Overview

We are looking for a Product Security Engineer to help scale our product security function, partnering closely with Research & Development teams to ensure that security is appropriately addressed across the HashiCorp suite of cloud, self-managed, and community products.

In Short

• Contribute to secure architecture and design of HashiCorp products.
• Work across various R&D teams to prioritize security features and bugs.
• Monitor threats and vulnerabilities impacting HashiCorp products.
• Act as SME on multiple information security areas.
• Plan & execute security assessments and threat modeling.
• Assist in execution of 3rd-party audits and penetration tests.
• Contribute to the development of security solutions across the product life-cycle.
• Contribute to the creation and delivery of security training.
• Research emerging attack vectors and techniques.

Requirements

• Experience in secure development practices.
• Familiarity with modern engineering practices and tools, especially Go.
• Knowledge of product and service architectures in cloud environments.
• Experience with AWS, Azure, and/or GCP.
• Understanding of security design and threat modeling.
• Knowledge of application and infrastructure security testing methodologies.
• Familiarity with vulnerabilities and defense options.
• Experience in product vulnerability management lifecycle.
• Ability to work with product engineering teams.
• Knowledge of cryptography and cryptographic primitives.

Benefits

• Work in a remote team environment.
• Opportunity to work with cutting-edge security practices.
• Collaborate with talented engineers and product managers.
• Engage in continuous learning and professional development.
• Participate in a culture that values security and innovation.