> Markdown version of [/jobs/ext/4627554-product-security-engineer-ii-hashicorp-security](https://www.wearedevelopers.com/jobs/ext/4627554-product-security-engineer-ii-hashicorp-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Product Security Engineer II- HashiCorp Security

- **Company:** IBM
- **Location:** New York, NY, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Software System Penetration Testing, User Authentication, Microsoft Azure, Cloud Computing, Code Review, Cyber Security, Continuous Integration, DevOps, OpenID, Security Assertion Markup Language (SAML), Single Sign-On, Software Vulnerability Management, Software Security, Hashicorp, Vulnerability Analysis, Programming Languages
- **Published:** November 7, 2026
- **Apply:** https://dejobs.org/x/x/0C83B48F05A44462B8FDD8592A5B8390/job/

## About the Role

* 4+ years of product security experience, partnering closely with engineering teams to design and secure applications and platforms.
 * Strong cloud and security architecture expertise, including threat modeling and securing AWS, Azure, and/or GCP environments.
 * Hands-on experience with application and infrastructure security, including testing, vulnerability management, remediation, and secure SDLC practices.
 * Knowledge of identity, authentication, and cryptography, including SSO, SAML, OIDC, and SCIM.
 * Experience with security operations and governance, including audits, vulnerability disclosure programs, and bug bounty management.

Preferred technical and professional experience

 * Modern engineering practices, processes, and tools, particularly related to the Go programming language and ecosystem.
 * Knowledge of application security topics, a pragmatic approach to security, and the ability to empathize with engineers and product managers across the company.

## Description

We are looking for a Product Security Engineer to help scale our product security function, partnering closely with Research & Development teams to ensure that security is appropriately addressed across the HashiCorp suite of cloud, self-managed, and community products.

In this role, your responsibilities will include:

 * Contribute to secure architecture and design of HashiCorp products, across our cloud, self-managed, and community product portfolio.
 * Work across various R&D teams to prioritize security features and bugs, and ensure implementation and mitigations.
 * Monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations and assess/communicate associated risk.
 * Act as SME on multiple information security areas (e.g. security architecture, application security, threat modeling etc.).
 * Plan & execute security assessments (dynamic testing, static testing, code review, etc) and threat modeling of HashiCorp's products, services, and associated cloud infrastructure.
 * Assist in execution of 3rd-party audits, penetration tests, and bug bounty programs.
 * Contribute to the development of security solutions across the product life-cycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc.
 * Contribute to the creation and delivery of security training.
 * Research emerging attack vectors and techniques.