Senior Product Security Engineer II - HashiCorp Security
Location not statedJobPosted 1 day agoStill listed today
Most applications go out cold — see where you stand first. No sign-up to start.
You apply on the employer's site, with no Olive account needed.
Watch jobs like this. New roles like this one, by email.
Don't just apply. Show up ready.
Olive works from this exact posting.
At a glance
Olive lists jobs from US employers, including remote roles you can work from the United States.
Job overview
HashiCorp is seeking a Senior Product Security Engineer to scale its product security function and partner with Research & Development teams. The role supports security across cloud, self-managed, and community products, from architecture and threat monitoring to assessments, audits, security tooling, training, and research into emerging attack techniques.
Skills & qualifications
Skills
Full job description
We are looking for a Senior Product Security Engineer to help scale our product security function, partnering closely with Research & Development teams to ensure that security is appropriately addressed across the HashiCorp suite of cloud, self-managed, and community products. In this role, your responsibilities will include: * Contribute to secure architecture and design of HashiCorp products, across our cloud, self-managed, and community product portfolio. * Work across various R&D teams to prioritize security features and bugs, and ensure implementation and mitigations. * Monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations and assess/communicate associated risk. * Act as SME on multiple information security areas (e.g. security architecture, application security, threat modeling etc.). * Plan & execute security assessments (dynamic testing, static testing, code review, etc) and threat modeling of HashiCorp’s products, services, and associated cloud infrastructure. * Assist in execution of 3rd-party audits, penetration tests, and bug bounty programs. * Contribute to the development of security solutions across the product life-cycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc. * Contribute to the creation and delivery of security training. * Research emerging attack vectors and techniques.
Prepare for this role
You've read the whole posting — now see how you match it.
