Product Security Architect (Remote US)

Hitachi•Boulder, CO

4d•$145,000 - $175,000•Remote

About The Position

The Product Security Architect will support VSP One Object/File as part of Platform Integrity Engineering, which safeguards product security, integrity, and resilience throughout the product lifecycle. The role provides hands-on security expertise across Kubernetes infrastructure, object and file storage services, APIs, management interfaces, networking, authentication, and data protection. It partners with Engineering and Product Management to build security into product architecture, development, release, and vulnerability management. The architect leads threat modeling and security architecture assessments, investigates CVEs for applicability and exploitability, performs targeted security testing, and validates remediation. The role works directly with Engineering to identify root causes and attack paths and turn complex risks into actionable engineering recommendations, security controls, and design improvements. It also communicates risk, customer impact, and remediation priorities to Engineering, Product Management, customers, security stakeholders, and leadership, and supports security advisories, VEX, SBOM/SCA analysis, customer security inquiries, and applicable security and regulatory requirements. This is a remote position for candidates in the United States who are legally authorized to work there and do not require sponsorship now or in the future.

Requirements

At least 5 years of hands-on experience in product, application, cloud, container, or infrastructure security, or penetration testing.
Strong experience securing Kubernetes-based, containerized, storage, or complex distributed platforms.
Deep understanding of Kubernetes, Linux, network and API security, authentication and authorization, secrets management, TLS/mTLS, encryption, and key management.
Experience assessing object and/or file storage, including S3-compatible interfaces, access controls, multitenancy, and data-protection boundaries.
Ability to investigate CVEs and determine product applicability, reachability, exploitability, and actual customer impact.
Ability to review source code, Kubernetes YAML, Helm charts, scripts, configurations, SBOMs, and third-party dependencies from a security perspective.
Hands-on penetration testing and vulnerability validation experience using tools such as kubectl, Trivy, Grype, Burp Suite, OpenSSL, and Nmap.
Ability to develop proof-of-concept tests, reproduce vulnerabilities, and independently verify remediation.
Strong written and verbal communication skills, including the ability to translate security risks into clear, actionable engineering recommendations.
Must be legally authorized to work in the United States and not require sponsorship now or in the future.

Nice To Haves

Certifications such as CKS, OSCP, GPEN, or CISSP; demonstrated hands-on security expertise is valued above certification alone.

Responsibilities

Provide hands-on security expertise for VSP One Object/File across Kubernetes infrastructure, object and file storage services, APIs, management interfaces, networking, authentication, and data protection.
Lead threat modeling and security architecture assessments.
Investigate CVEs to determine product applicability and exploitability.
Perform targeted security testing and validate remediation.
Partner with Engineering to identify root causes and attack paths and recommend engineering actions, security controls, and design improvements.
Communicate security risk, customer impact, and remediation priorities to Engineering, Product Management, customers, security stakeholders, and leadership.
Support security advisories, VEX, SBOM/SCA analysis, customer security inquiries, and applicable security and regulatory requirements.