Product Security Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Deliver practical security expertise across Kubernetes infrastructure, object and file storage services, APIs, management interfaces, networking, authentication, and data protection.

• Spearhead threat modeling and conduct security architecture evaluations.

• Analyze CVEs for relevance and potential exploitation.

• Execute targeted security assessments and confirm remediation efforts.

• Collaborate with Engineering to uncover root causes and attack vectors.

• Convert intricate security risks into actionable engineering recommendations, security measures, and design enhancements.

• Communicate risks, customer impacts, and remediation priorities to Engineering, Product Management, customers, security stakeholders, and leadership.

• Assist with security advisories, VEX, SBOM/SCA analysis, customer security inquiries, and relevant security and regulatory obligations.

⛳️ Requirements

• Over 5 years of hands-on experience in product, application, cloud, container, infrastructure security, or penetration testing.

• Extensive experience in securing Kubernetes-based, containerized, storage, or complex distributed platforms.

• Profound knowledge of Kubernetes, Linux, network and API security, authentication and authorization, secrets management, TLS/mTLS, encryption, and key management.

• Experience in evaluating object and/or file storage, including S3-compatible interfaces, access controls, multitenancy, and data protection boundaries.

• Demonstrated ability to investigate CVEs and assess product applicability, reachability, exploitability, and actual customer impact.

• Capability to review source code, Kubernetes YAML, Helm charts, scripts, configurations, SBOMs, and third-party dependencies from a security standpoint.

• Practical experience in penetration testing and vulnerability validation using tools such as kubectl, Trivy, Grype, Burp Suite, OpenSSL, and Nmap.

• Ability to develop proof-of-concept tests, replicate vulnerabilities, and independently verify remediation.

• Excellent written and verbal communication skills, with the capability to translate security risks into clear, actionable engineering guidance.

• Certifications such as CKS, OSCP, GPEN, or CISSP are preferred.

🏝️ Benefits

• Eligible to participate in Hitachi Vantara’s bonus/variable/commission pay programs, where applicable.

• Industry-leading benefits, support, and services for comprehensive health and wellbeing.

• Flexible arrangements that suit your needs (role and location dependent).

• Inclusive culture grounded in mutual respect and merit-based systems.

• Reasonable accommodations during the recruitment process.