Senior Product Security Engineer (AI)

Location: Hybrid role based in Poughkeepsie, Lowell, Rochester, Tucson, Armonk, Raleigh, Bellevue, Atlanta, San Jose, Dallas, Austin, San Francisco, or Seattle, United States

Salary: $161,000–$276,000 per year

Company

IBM Software develops AI-powered, cloud-native products and hybrid cloud solutions, including hirify.global security products such as Vault, Boundary, and Radar.

What you will do

• Partner with Vault, Boundary, and Radar engineering teams to embed security throughout the product development lifecycle.
• Conduct architecture and design reviews, threat modeling, security assessments, and secure-design guidance.
• Assess vulnerabilities through validation, exploitability analysis, risk and severity assessment, and remediation prioritization.
• Collaborate on workarounds, fixes, remediation plans, coordinated vulnerability disclosure, security advisories, and customer-facing communications.
• Participate in incident response, including investigation, impact assessment, containment planning, root cause analysis, and post-incident improvements.
• Build and prototype AI-assisted security tooling, workflows, and automation to improve vulnerability response and engineering productivity.

Requirements

• 5+ years of experience in application security, product security, or security engineering; 8+ years of overall industry experience is preferred.
• Expertise in threat modeling, architecture reviews, security design reviews, and vulnerability assessments.
• Experience identifying, triaging, prioritizing, and assessing vulnerabilities based on exploitability and business impact.
• Strong knowledge of OWASP Top 10, CWE, CVSS, vulnerability management, and secure software development principles.
• Proficiency in Go, Python, or Rust.
• Deep understanding of authentication, authorization, encryption, PKI, key management, identity, and secrets management.
• Ability to influence engineering teams and drive secure engineering practices.
• High school diploma or GED required.

Nice to have

• Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or equivalent practical experience.
• Hands-on experience with static and dynamic analysis, software composition analysis, container security, cloud security tools, and vulnerability research.
• Experience with incident response, coordinated vulnerability disclosure, security advisories, and customer-facing security communications.
• Familiarity with hirify.global technologies including Vault, Boundary, Consul, Terraform, and Radar.
• Experience building security automation, developer security tools, or AI-assisted security workflows.

Culture & Benefits

• Full-time employment with hybrid work and some travel based on business demand.
• Healthcare coverage, dental and vision care, mental health support, 401(k), pension, stock purchase plan, insurance, and performance-based incentives.
• Paid holidays, sick time, vacation, parental bonding leave, and paid family care leave where required.
• AI-driven learning resources, training, and access to industry-recognized certifications.
• Inclusive employee resource groups, volunteer opportunities, and retail, service, and experience discounts.
• Visa sponsorship is not available now or in the future; candidates must be able to work without current or future visa sponsorship.

Hiring process

• The position is expected to remain posted for 21 days from the posting date or less if the role is filled.