Product Security Engineer II (HashiCorp Security)

Location: Hybrid role based in Lowell, Austin, or New York, United States

Salary: $77,000–$132,000 per year

Company

hirify.global, now part of IBM, develops cloud, infrastructure automation, and security solutions for hybrid and multi-cloud environments.

What you will do

• Design and review secure architectures across hirify.global cloud, self-managed, and community products.
• Partner with R&D teams to prioritize security features and bugs and implement mitigations.
• Monitor, triage, and communicate risks related to product and service vulnerabilities.
• Plan and execute dynamic testing, static testing, code reviews, threat modeling, penetration tests, and third-party audits.
• Develop security tools, CI/CD integrations, product security fixes, and lifecycle improvements.
• Deliver security training and research emerging attack vectors and techniques.

Requirements

• 4+ years of product security experience, partnering with engineering teams to design and secure applications and platforms.
• Strong cloud and security architecture expertise, including threat modeling and securing AWS, Azure, and/or GCP environments.
• Hands-on experience with application and infrastructure security, testing, vulnerability management, remediation, and secure SDLC practices.
• Knowledge of identity, authentication, and cryptography, including SSO, SAML, OIDC, and SCIM.
• Experience with security operations and governance, including audits, vulnerability disclosure programs, and bug bounty management.
• High School Diploma or GED required.

Nice to have

• Bachelor's Degree.
• Experience with modern engineering practices, processes, and tools, particularly the Go programming language and ecosystem.
• Knowledge of application security topics and a pragmatic approach to collaborating with engineers and product managers.

Culture & Benefits

• Full-time employment with hybrid work and no travel required.
• Healthcare, dental, vision, mental health, disability, life insurance, and financial programs including 401(k).
• Paid time off, holidays, sick time, vacation, parental bonding leave, and other paid care leave according to policy and applicable law.
• AI-driven learning resources, training, educational support, and certification opportunities.
• IBM will not provide visa sponsorship; candidates must be able to work without current or future visa sponsorship.
• IBM is committed to equal employment opportunity and an inclusive workplace.