Product Security Engineer, HashiCorp

Partnerships

$145.2-205k

Salary range for candidates based in California, New York, Colorado, Illinois, Minnesota, or Washington only

AWS

GCP

Azure

Mid and Senior level

Remote from US

Cloud-computing infrastructure provider

Open for applications

Cloud-computing infrastructure provider

1001+ employees

B2BEnterpriseMarketplaceSaaSCyber SecurityCloud Computing

Open for applications

$145.2-205k

Salary range for candidates based in California, New York, Colorado, Illinois, Minnesota, or Washington only

AWS

GCP

Azure

Mid and Senior level

Remote from US

1001+ employees

B2BEnterpriseMarketplaceSaaSCyber SecurityCloud Computing

Company mission

To help organizations to operate infrastructure in the cloud because it believes that infrastructure enables innovation.

Job

Company

Role

Who you are

We are looking for talented self-starters with 4+ years of security experience
We will consider experienced engineers with less security-specific experience but the desire to learn!
Experience in some of these topic areas:
Secure development practices, and integration into broader engineering activities
Modern engineering practices, processes, and tools, particularly related to the Go programming language and ecosystem
Product and service architectures in modern, multi-tenant cloud environments (IaaS, SaaS, PaaS)
Amazon Web Services (AWS), Microsoft Azure, and/or Google Cloud Platform (GCP)
Security design / architecture and threat modeling
Application and infrastructure security testing methodologies and tools
Vulnerabilities (old and new), and options for defense / mitigation
Product vulnerability management lifecycle
Working with and/or supporting product engineering teams
Cryptography and cryptographic primitives

What the job involves

The product security partnerships team is composed of security engineers working to ensure HashiCorp delivers secure software to its customers
We work closely with product engineering teams at HashiCorp, enabling them to write secure code and embed security into the development processes
We are responsible for design review, threat modeling, and code review of new features, as well as vulnerability management across our entire product portfolio
Contribute to secure architecture and design of HashiCorp products, across our cloud, self-managed, and community product portfolio
Work across various R&D teams to prioritize security features and bugs, and ensure implementation and mitigations
Monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations and assess/communicate associated risk
Act as SME on multiple information security areas (e.g. security architecture, application security, threat modeling etc.)
Plan & execute security assessments (dynamic testing, static testing, code review, etc) and threat modeling of HashiCorp’s products, services, and associated cloud infrastructure
Assist in execution of 3rd-party audits, penetration tests, and bug bounty programs
Contribute to the development of security solutions across the product life-cycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc
Contribute to the creation and delivery of security training
Research emerging attack vectors and techniques

Our take

HashiCorp's software streamlines cloud operations for companies' teams, offering open-source solutions to facilitate cloud migration and utilization. Additionally, the company provides commercial versions of its tools, catering to businesses that prefer managed services.

With a pay-per-hour pricing model and adaptable products, HashiCorp enables companies to construct infrastructure spanning legacy systems, private clouds, and multiple cloud providers. its flagship product, Terraform, allows developers to create consistent rules, enhancing operational efficiency and reducing costs.

In a landscape increasingly reliant on AI and automation, HashiCorp simplifies the intricate architecture of data center management, ensuring a rising demand for its services. The company remains committed to enhancing its platform with new features and improving operational efficiency to fuel continued growth.

Steph

Company Specialist at Welcome to the Jungle

Insights

Top investors

5% employee growth in 12 months

Glassdoor (3.6)

Company

Funding (last 2 of 5 rounds)

Mar 2020

$175m

SERIES E

Nov 2018

$100m

SERIES D

Total funding: $349m

Company benefits

Medical, dental & vision
Life & disability insurance
Flexible spending account (FSA)
Vacation and Other Leaves
401(k)
Family Expansion Benefit
Maternity and Parental Leave
Expanded Mental Health Support

Company HQ

The East Cut, San Francisco, CA

Leadership

Mitchell Hashimoto

(Co-Founder)

Has worked as CEO and CTO of the company. Was previously Operations Engineer at Kiip, and a Developer at CitrusByte.

Armon Dadgar

(Co-Founder & CTO)

Former Software Engineer at Kiip. Worked as a Software Development Intern at Amazon.

Share this job

View 68 more jobs at HashiCorp