Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 1K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

For Employers

Add office photos

Employer? Claim Account for FREE

HashiCorp

Compare

4.7

based on 14 Reviews

18 HashiCorp Jobs

Product Security Engineer

HashiCorp

4.7

based on 14 Reviews

2-6 years

Bangalore / Bengaluru

1 vacancy

Product Security Engineer

HashiCorp

posted 20d ago

Job Role Insights

Flexible timing

Key skills for the job

Automation Testing Cryptography Penetration Testing Information Security Vulnerability Management Application Security

+ 4 more

Job Description

In this role, your responsibilities will include:

Contribute to secure architecture and design of HashiCorp products.
Partner with R&D teams to prioritize security features and bugs, and ensure implementation and mitigations.
Monitor threats and vulnerabilities impacting HashiCorp products and services; triage reported vulnerabilities, identify mitigations, and assess/communicate associated risks.
Plan & execute security assessments (dynamic testing, static testing, code review, etc) and threat modeling of HashiCorp s products, services, and associated cloud infrastructure.
Build and implement security solutions across the product lifecycle, such as standalone security tools, CI/CD pipeline integrations, product security features/fixes, etc.
Act as SME in multiple information security areas (e.g. security architecture, application security, threat modeling etc.)
Assist in the execution of 3rd-party audits, penetration tests, and bug bounty programs.
Contribute to the creation and delivery of security training.
Research emerging attack vectors and techniques.

We are looking for talented self-starters with 4+ years of security experience. We will consider experienced engineers with less security-specific experience but the desire to learn!

You may be a good fit if you have knowledge and experience around:

Product/service architectures in modern cloud environments (IaaS, SaaS, PaaS).
Modern engineering practices, processes, and tools, particularly related to the Go programming language and ecosystem.
Secure development practices, and integration into broader engineering activities.
Secure operations practices, specifically wrt. cloud environments including Amazon Web Services (AWS), Microsoft Azure, and/or Google Cloud Platform (GCP)..
Application and infrastructure security testing methodologies and tools.
Security design/architecture and threat modeling.
Vulnerabilities (old and new), and options for defense/mitigation.
Product vulnerability management lifecycle.
Security audits, penetration tests, and/or bug bounty programs.
Cryptography and cryptographic libraries. #