Senior Product Security Engineer II - HashiCorp Security

Location: Hybrid in Lowell, Austin, or New York, United States

Salary: $124,000–$214,000 per year

Company

hirify.global, now part of IBM, develops cloud-native software for automating and securing multi-cloud and hybrid environments.

What you will do

• Partner with product engineering and R&D teams to embed security across cloud, self-managed, and community products.
• Contribute to secure architecture, design reviews, threat modeling, risk assessment, and security feature prioritization.
• Monitor and triage vulnerabilities, assess risks, and coordinate mitigations across the product portfolio.
• Plan and execute dynamic testing, static testing, code reviews, penetration tests, third-party audits, and bug bounty activities.
• Develop security tools, CI/CD integrations, product security fixes, and lifecycle security solutions.
• Create and deliver security training and research emerging attack vectors and techniques.

Requirements

• 8+ years of product security experience, including close partnership with engineering teams throughout the development lifecycle.
• Strong security architecture expertise covering threat modeling, secure design reviews, and risk assessment.
• Deep cloud security knowledge across AWS, Azure, and/or GCP, including multi-tenant SaaS, IaaS, and PaaS environments.
• Hands-on application and infrastructure security experience with secure development, security testing, vulnerability management, and remediation.
• Broad security program expertise, including IAM, SSO, SAML, OIDC, SCIM, cryptography fundamentals, security audits, vulnerability disclosure, and bug bounty programs.
• High School Diploma or GED required; a Bachelor's Degree is preferred.
• Must be able to work without current or future visa sponsorship.

Nice to have

• Experience with modern engineering practices, processes, and tools, particularly the Go programming language and ecosystem.
• Knowledge of application security topics and a pragmatic, empathetic approach to working with engineers and product managers.

Culture & Benefits

• Full-time hybrid employment with comprehensive healthcare, dental, vision, and mental health coverage.
• 401(k), pension plan, employee stock purchase plan, life insurance, disability coverage, and potential performance-based incentives.
• Paid time off including 12 holidays, sick time, vacation, parental bonding leave, and other paid care leave programs.
• Access to AI-driven learning resources, training, and industry-recognized certifications.
• Inclusive employee resource groups, volunteer opportunities, and employee discounts.