> Markdown version of [/jobs/ext/4626130-senior-product-security-engineer-ii-hashicorp-security](https://www.wearedevelopers.com/jobs/ext/4626130-senior-product-security-engineer-ii-hashicorp-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Product Security Engineer II - HashiCorp Security

- **Company:** IBM
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Code Review, Cyber Security, Continuous Integration, DevOps, Infrastructure as a Service (IaaS), Identity and Access Management, OpenID, Platform as a Service (PAAS), Security Assertion Markup Language (SAML), Secure Coding, Single Sign-On, Software Vulnerability Management, Software Security, Hashicorp, Vulnerability Analysis, Programming Languages
- **Published:** November 7, 2026
- **Apply:** https://dejobs.org/x/x/94BDFE38326F4F37821DD9F2586DD539/job/

## About the Role

* 8+ years of product security experience, partnering closely with engineering teams to embed security throughout the development lifecycle.
 * Strong security architecture expertise, including threat modeling, secure design reviews, and risk assessment.
 * Deep cloud security knowledge across AWS, Azure, and/or GCP, with experience securing multi-tenant SaaS, IaaS, and PaaS environments.
 * Hands-on application and infrastructure security experience, including secure development practices, security testing, vulnerability management, and remediation.
 * Broad security program expertise, including identity and access management (SSO, SAML, OIDC, SCIM), cryptography fundamentals, security audits, vulnerability disclosure, and bug bounty programs.

Preferred technical and professional experience

 * Modern engineering practices, processes, and tools, particularly related to the Go programming language and ecosystem.
 * Knowledge of application security topics, a pragmatic approach to security, and the ability to empathize with engineers and product managers across the company.

## Description

We are looking for a Senior Product Security Engineer to help scale our product security function, partnering closely with Research & Development teams to ensure that security is appropriately addressed across the HashiCorp suite of cloud, self-managed, and community products.

In this role, your responsibilities will include:

 * Contribute to secure architecture and design of HashiCorp products, across our cloud, self-managed, and community product portfolio.
 * Work across various R&D teams to prioritize security features and bugs, and ensure implementation and mitigations.
 * Monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations and assess/communicate associated risk.
 * Act as SME on multiple information security areas (e.g. security architecture, application security, threat modeling etc.).
 * Plan & execute security assessments (dynamic testing, static testing, code review, etc) and threat modeling of HashiCorp's products, services, and associated cloud infrastructure.
 * Assist in execution of 3rd-party audits, penetration tests, and bug bounty programs.
 * Contribute to the development of security solutions across the product life-cycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc.
 * Contribute to the creation and delivery of security training.
 * Research emerging attack vectors and techniques.