Senior Application Security Engineer, HashiCorp
Product Line Partnership
Cloud-computing infrastructure provider
Job no longer available
Cloud-computing infrastructure provider
1001+ employees
Job no longer available
1001+ employees
Company mission
To help organisations to operate infrastructure in the cloud because it believes that infrastructure enables innovation.
Role
Who you are
- Talented self-starters with 4+ years of security experience. We will consider experienced engineers with less security-specific experience but the desire to learn!
- Secure development practices, and integration into broader engineering activities
- Modern engineering practices, processes, and tools, particularly related to the Go programming language and ecosystem
- Product and service architectures in modern, multi-tenant cloud environments (IaaS, SaaS, PaaS)
- Amazon Web Services (AWS), Microsoft Azure, and/or Google Cloud Platform (GCP)
- Security design / architecture and threat modeling
- Application and infrastructure security testing methodologies and tools
- Vulnerabilities (old and new), and options for defense / mitigation
- Product vulnerability management lifecycle
- Security audits, penetration tests, and/or bug bounty programs
- Cryptography and cryptographic libraries
- Secure operations practices, specifically in cloud environments
What the job involves
- Contribute to secure architecture and design of HashiCorp products, across our cloud, self-managed, and community product portfolio
- Work across various R&D teams to prioritize security features and bugs, and ensure implementation and mitigations
- Monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations and assess/communicate associated risk
- Act as SME on multiple information security areas (e.g. security architecture, application security, threat modeling etc.)
- Plan & execute security assessments (dynamic testing, static testing, code review, etc) and threat modeling of HashiCorp’s products, services, and associated cloud infrastructure
- Assist in execution of 3rd-party audits, penetration tests, and bug bounty programs
- Contribute to the development of security solutions across the product life-cycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc
- Contribute to the creation and delivery of security training
- Research emerging attack vectors and techniques
Application process
- Please note, as communication is a critical aspect of how we work, a cover letter is a great way to provide a sample of how you communicate
- In your cover letter, describe why you're interested in working at HashiCorp, and what draws you to this role in particular
Our take
HashiCorp's software streamlines cloud operations for companies' teams, offering open-source solutions to facilitate cloud migration and utilization. Additionally, the company provides commercial versions of its tools, catering to businesses that prefer managed services.
With a pay-per-hour pricing model and adaptable products, HashiCorp enables companies to construct infrastructure spanning legacy systems, private clouds, and multiple cloud providers. its flagship product, Terraform, allows developers to create consistent rules, enhancing operational efficiency and reducing costs.
In a landscape increasingly reliant on AI and automation, HashiCorp simplifies the intricate architecture of data centre management, ensuring a rising demand for its services. The company was acquired by IBM in 2024, for which HashiCorp will integrate its hybrid cloud and AI software. In turn, Hashicorp will utilise IBM's worldwide reach and R&D opportunities to grow its software capabilities and market share.
Steph
Company Specialist at Welcome to the Jungle
Insights
5% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Mar 2020
$175m
SERIES E
Nov 2018
$100m
SERIES D
Total funding: $349m
Company benefits
- Medical, dental & vision
- Life & disability insurance
- Flexible spending account (FSA)
- Vacation and Other Leaves
- 401(k)
- Family Expansion Benefit
- Maternity and Parental Leave
- Expanded Mental Health Support
Company HQ
SoMa, San Francisco, CA
Leadership
Mitchell Hashimoto
(Co-Founder)Has worked as CEO and CTO of the company. Was previously Operations Engineer at Kiip, and a Developer at CitrusByte.
Armon Dadgar
(Co-Founder & CTO)Former Software Engineer at Kiip. Worked as a Software Development Intern at Amazon.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job