Product Security Engineer

Function

Were Hitachi Vantara the data foundation trusted by the worlds innovators. Our resilient high-performance data infrastructure means that customers from banks to theme parks can focus on achieving the incredible with data.

If youve seen the Las Vegas Sphere youve seen just one example of how we empower businesses to automate optimize innovate and wow their customers. Right now were laying the foundation for our next wave of looking for people who love being part of a diverse global team and who get excited about making a real-world impact with data.

Role Summary

The Product Security Engineer strengthens Hitachi Vantaras product security across the Software Development Lifecycle (SDLC) driving vulnerability management security assessments remediation Secure SDLC and DevSecOps initiatives in collaboration with Engineering Product Cloud Operations Support and Security teams.

Key Responsibilities

1. Product Security Expertise

• Develop understanding of product architecture technology stacks APIs integrations and deployment models; act as the primary security contact for Engineering Product and Support teams.
• Identify product security risks and support security assessments and customer escalations.
• Familiarity with NFS SMB LDAP Active Directory Kerberos TLS/SSH PKI REST API security access controls Amazon S3 tenant isolation Kubernetes RBAC secrets management and encryption.

2. Security Triage & Vulnerability Management

• Perform vulnerability triage reproduction validation and risk assessment using CVSS exploitability and business/customer impact.
• Lead vulnerability identification prioritization remediation and reporting across SAST DAST SCA penetration tests bug bounty programs and customer-reported issues.
• Establish remediation SLAs track findings to closure validate fixes and drive root cause analysis and corrective actions.

3. Secure Software Development & DevSecOps

• Promote Secure SDLC and secure coding practices across Java and cloud-native applications.
• Develop security standards conduct code reviews validate fixes and guide engineering teams on sustainable remediation.
• Integrate security controls and scanning tools into CI/CD pipelines automate security validation and promote shift-left practices.
• Support security implementation across Kubernetes Docker containers IaC and cloud-native deployment pipelines.

4. Incident Response & Governance

• Investigate and remediate product security incidents conduct root cause analysis and recommend preventive controls.
• Collaborate with Engineering Cloud Operations Support and Security teams during incident response.
• Support SOC 2 ISO 27001 NIST CIS customer security assessments audits evidence collection and remediation tracking.
• Maintain security documentation and ensure alignment with corporate security policies and risk governance frameworks.

5. Security Leadership & Enablement

• Act as Product Security SME mentor teams on security best practices and deliver security awareness and secure coding training.
• Stay updated on emerging vulnerabilities threats attack techniques and mitigation strategies.

Required Skills & Experience

• 8 years of experience in Application Security Product Security Cybersecurity DevSecOps or Software Engineering.
• Strong knowledge of OWASP Top 10 CWE CVSS secure coding vulnerability assessment security triage remediation and risk analysis.
• Understanding of enterprise architectures APIs microservices distributed systems SaaS OAuth OIDC SAML and IAM.
• Hands-on experience with Black Duck Black Duck SRM AppScan Qualys SonarQube Burp Suite and dependency scanning tools.
• Familiarity with Kubernetes Docker CI/CD security DevSecOps AWS/Azure container security and cloud-native environments.
• Proven vulnerability remediation experience with strong analytical troubleshooting and cross-functional collaboration skills.

Preferred Certifications

CISSP CSSLP Security GIAC CCSP AWS Security or Azure Security.

Success Metrics

• Reduced critical/high vulnerabilities and security incidents.
• Improved remediation SLAs and vulnerability resolution.
• Increased DevSecOps adoption and security automation.
• Improved product security compliance and audit readiness.
• Enhanced security awareness across Engineering and Support teams.

Works Closely With: Engineering Managers Product Owners Architects DevOps Leads Customer Support Security Operations and Customer Escalation Teams.

#LI-PN1

Were a global team of innovators. Together we harness engineering excellence and passion for insight to co-create meaningful solutions to complex challenges. We turn organizations into data-driven leaders that can a make positive impact on their industries and society. If you believe that innovation can inspire the future this is the place to fulfil your purpose and achieve your potential.

Hitachi is a global company operating across a wide range of industries and regions. One of the things that sets Hitachi apart is the diversity of our business and people which drives our innovation and growth.

We are committed to building an inclusive culture based on mutual respect and merit-based systems. We believe that when people feel valued heard and safe to express themselves they do their best work.

We help take care of your today and tomorrow with industry-leading benefits support and services that look after your holistic health and wellbeing. Were also champions of life balance and offer flexible arrangements that work for you (role and location dependent). Were always looking for new ways of working that bring out our best which leads to unexpected ideas. So here youll experience a sense of belonging and discover autonomy freedom and ownership as you work alongside talented people you enjoy sharing knowledge with.

Were proud to say were an equal opportunity employer and welcome all applicants for employment without attention to race colour religion sex sexual orientation gender identity national origin veteran age disability status or any other protected characteristic. Should you need reasonable accommodations during the recruitment process please let us know so that we can do our best to set you up for success.