HashiCorp is hiring a
Product Security Engineer

Summary

Join our Product Security function as a Security Engineer with development experience to build and extend existing tooling and processes to address vulnerabilities across multiple projects.

Requirements

• 4+ years of security experience
• Knowledge and experience around secure development practices, and integration into broader engineering activities
• Knowledge and experience around modern engineering practices, processes, and tools, particularly related to the Go programming language and ecosystem
• Knowledge and experience around product and service architectures in modern, multi-tenant cloud environments (IaaS, SaaS, PaaS)
• Knowledge and experience around Amazon Web Services (AWS), Microsoft Azure, and/or Google Cloud Platform (GCP)
• Knowledge and experience around security design / architecture and threat modeling
• Knowledge and experience around product vulnerability management lifecycle
• Knowledge and experience around cryptography and cryptographic libraries
• Knowledge and experience around secure operations practices, specifically with respect to cloud environments

Responsibilities

• Contribute to the development of security solutions across the product life-cycle, such as standalone security tools, “shift left” CI/CD pipeline components, security solution integrations, product security features/fixes, etc
• Support other Product Security teams in efforts to monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations and assess/communicate associated risk. Identity and explore opportunities to strengthen these efforts with tooling / automation
• Contribute to secure architecture and design of HashiCorp products, across our cloud, self-managed, and community product portfolio