Senior Security Engineer, HashiCorp

• Security at HashiCorp is largely a remote team. While prior experience working remotely isn't required, we are looking for team members who perform well given a high level of independence and autonomy
• We are looking for talented self-starters with 5+ years of security experience. We will consider experienced engineers with less security-specific experience but the desire to learn!
• 3+ years of experience with a modern programming language like GO or Python
• Modern engineering practices, processes, and tools, particularly related to the Go programming language and ecosystem
• Product and service architectures in modern, multi-tenant cloud environments (IaaS, SaaS, PaaS)
• Amazon Web Services (AWS), Microsoft Azure, and/or Google Cloud Platform (GCP)
• Security design / architecture and threat modeling
• Application and infrastructure security testing methodologies and tools
• Vulnerabilities (old and new), and options for defense / mitigation
• Product vulnerability management lifecycle
• Working with and/or supporting product engineering teams
• Cryptography and cryptographic primitives
• We’re looking for a candidate with strong written and verbal communication skills, knowledge of application security topics, a pragmatic approach to security, and the ability to empathize with engineers and product managers across the company

• We are looking for a Senior Security Engineer to help solve problems across our product and cloud portfolio
• We partner closely with Research & Development teams to ensure that security is appropriately addressed across the HashiCorp suite of cloud, self-managed, and community products
• Contribute to secure architecture and design of HashiCorp products, across our cloud, self-managed, and community product portfolio
• Work across various R&D teams to prioritize security features and bugs, and ensure implementation and mitigations
• Monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations and assess/communicate associated risk
• Act as SME in multiple information security areas (e.g. security architecture, application security, threat modeling, data protection, etc.)
• Develop internal tooling to address security problem areas
• Contribute to the development of security solutions across the product life-cycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc

• Please note, as communication is a critical aspect of how we work, a cover letter is a great way to provide a sample of how you communicate
• In your cover letter, describe why you're interested in working at HashiCorp, and what draws you to this role in particular

• Medical, dental & vision
• Life & disability insurance
• Flexible spending account (FSA)
• Vacation and Other Leaves
• 401(k)
• Family Expansion Benefit
• Maternity and Parental Leave
• Expanded Mental Health Support

Total funding: $349m

HashiCorp's software streamlines cloud operations for companies' teams, offering open-source solutions to facilitate cloud migration and utilization. Additionally, the company provides commercial versions of its tools, catering to businesses that prefer managed services.