Product Security Engineer

Summary

Join our team as a Product Security Engineer to help scale our product security function and ensure the security of HashiCorp's cloud and self-managed products. This role will report to a Product Security manager and involve contributing to secure architecture and design, partnering with R&D teams, monitoring threats, and building security solutions.

Responsibilities

• Contribute to secure architecture and design of HashiCorp products
• Partner with R&D teams to prioritize security features and bugs, and ensure implementation and mitigations
• Monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations, and assess/communicate associated risks
• Plan & execute security assessments (dynamic testing, static testing, code review, etc) and threat modeling of HashiCorp’s products, services, and associated cloud infrastructure
• Build and implement security solutions across the product lifecycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc
• Act as SME in multiple information security areas (e.g. security architecture, application security, threat modeling etc.)
• Assist in the execution of 3rd-party audits, penetration tests, and bug bounty programs
• Contribute to the creation and delivery of security training
• Research emerging attack vectors and techniques