Security Engineer, HashiCorp
Product Security
$109.8-155k
Cloud-computing infrastructure provider
Be an early applicant
Cloud-computing infrastructure provider
1001+ employees
Be an early applicant
$109.8-155k
1001+ employees
Company mission
To help organizations to operate infrastructure in the cloud because it believes that infrastructure enables innovation.
Role
Who you are
- Security at HashiCorp is largely a remote team. While prior experience working remotely isn't required, we are looking for team members who perform well given a high level of independence and autonomy
- We are looking for talented self-starters with 4+ years of security experience
- We will consider experienced engineers with less security-specific experience but the desire to learn!
- Experience in some of these topic areas:
- Secure development practices, and integration into broader engineering activities
- Modern engineering practices, processes, and tools, particularly related to the Go programming language and ecosystem
- Product and service architectures in modern, multi-tenant cloud environments (IaaS, SaaS, PaaS)
- Amazon Web Services (AWS), Microsoft Azure, and/or Google Cloud Platform (GCP)
- Security design / architecture and threat modeling
- Application and infrastructure security testing methodologies and tools
- Vulnerabilities (old and new), and options for defense / mitigation
- Product vulnerability management lifecycle
- Working with and/or supporting product engineering teams
- We’re looking for a candidate with strong written and verbal communication skills, knowledge of application security topics, a pragmatic approach to security, and the ability to empathize with engineers and product managers across the company
What the job involves
- We are looking for a Product Security Engineer Ito help scale our product security function, partnering closely with Research & Development teams to ensure that security is appropriately addressed across the HashiCorp suite of cloud, self-managed, and community products
- The product security partnerships team is composed of security engineers working to ensure HashiCorp delivers secure software to its customers
- We work closely with product engineering teams at HashiCorp, enabling them to write secure code and embed security into the development processes
- We are responsible for design review, threat modeling, and code review of new features, as well as vulnerability management across our entire product portfolio
- Contribute to secure architecture and design of HashiCorp products, across our cloud, self-managed, and community product portfolio
- Work across various R&D teams to prioritize security features and bugs, and ensure implementation and mitigations
- Monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations and assess/communicate associated risk
- Act as SME on multiple information security areas (e.g. security architecture, application security, threat modeling etc.)
- Plan & execute security assessments (dynamic testing, static testing, code review, etc) and threat modeling of HashiCorp’s products, services, and associated cloud infrastructure
- Assist in execution of 3rd-party audits, penetration tests, and bug bounty programs
- Contribute to the development of security solutions across the product life-cycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc
- Contribute to the creation and delivery of security training
- Research emerging attack vectors and techniques
Application process
- Please note, as communication is a critical aspect of how we work, a cover letter is a great way to provide a sample of how you communicate
- In your cover letter, describe why you're interested in working at HashiCorp, and what draws you to this role in particular
Our take
HashiCorp's software streamlines cloud operations for companies' teams, offering open-source solutions to facilitate cloud migration and utilization. Additionally, the company provides commercial versions of its tools, catering to businesses that prefer managed services.
With a pay-per-hour pricing model and adaptable products, HashiCorp enables companies to construct infrastructure spanning legacy systems, private clouds, and multiple cloud providers. its flagship product, Terraform, allows developers to create consistent rules, enhancing operational efficiency and reducing costs.
In a landscape increasingly reliant on AI and automation, HashiCorp simplifies the intricate architecture of data center management, ensuring a rising demand for its services. The company remains committed to enhancing its platform with new features and improving operational efficiency to fuel continued growth.
Steph
Company Specialist at Welcome to the Jungle
Insights
5% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Mar 2020
$175m
SERIES E
Nov 2018
$100m
SERIES D
Total funding: $349m
Company benefits
- Medical, dental & vision
- Life & disability insurance
- Flexible spending account (FSA)
- Vacation and Other Leaves
- 401(k)
- Family Expansion Benefit
- Maternity and Parental Leave
- Expanded Mental Health Support
Company HQ
The East Cut, San Francisco, CA
Leadership
Mitchell Hashimoto
(Co-Founder)Has worked as CEO and CTO of the company. Was previously Operations Engineer at Kiip, and a Developer at CitrusByte.
Armon Dadgar
(Co-Founder & CTO)Former Software Engineer at Kiip. Worked as a Software Development Intern at Amazon.
Share this job
View 89 more jobs at HashiCorp