Product Security Architect (Remote US)

Hitachi•Denver, CO

3d•Remote

About The Position

The Product Security Architect will support VSP One Object/File, providing hands-on security expertise across Kubernetes infrastructure, object and file storage services, APIs, management interfaces, networking, authentication, and data protection. The role partners with Engineering and Product Management to embed security into product architecture, development, release, and ongoing vulnerability management. The architect leads threat modeling and security architecture assessments, investigates CVEs for product applicability and exploitability, performs targeted security testing, and validates remediation. The role works directly with Engineering to identify root causes and attack paths and translates security risks into actionable engineering recommendations, security controls, and design improvements. It also supports security advisories, VEX, SBOM/SCA analysis, customer security inquiries, and applicable security and regulatory requirements. This is a remote U.S. position; candidates must be legally authorized to work in the United States and must not require sponsorship now or in the future.

Requirements

At least 5 years of hands-on experience in product, application, cloud, container, infrastructure security, or penetration testing.
Strong experience securing Kubernetes-based, containerized, storage, or complex distributed platforms.
Deep understanding of Kubernetes, Linux, network and API security, authentication and authorization, secrets management, TLS/mTLS, encryption, and key management.
Experience assessing object and/or file storage, including S3-compatible interfaces, access controls, multitenancy, and data-protection boundaries.
Ability to investigate CVEs and determine product applicability, reachability, exploitability, and actual customer impact.
Ability to review source code, Kubernetes YAML, Helm charts, scripts, configurations, SBOMs, and third-party dependencies from a security perspective.
Hands-on penetration testing and vulnerability validation experience using tools such as kubectl, Trivy, Grype, Burp Suite, OpenSSL, and Nmap.
Ability to develop proof-of-concept tests, reproduce vulnerabilities, and independently verify remediation.
Strong written and verbal communication skills and the ability to translate security risks into clear, actionable engineering recommendations.
Must be legally authorized to work in the United States and not require sponsorship now or in the future.

Nice To Haves

Certifications such as CKS, OSCP, GPEN, or CISSP; demonstrated hands-on security expertise is valued above certification alone.

Responsibilities

Provide hands-on security expertise for VSP One Object/File across Kubernetes infrastructure, object and file storage services, APIs, management interfaces, networking, authentication, and data protection.
Lead threat modeling and security architecture assessments.
Investigate CVEs to determine product applicability, reachability, exploitability, and customer impact.
Perform targeted security testing, reproduce vulnerabilities, and independently validate remediation.
Partner with Engineering to identify root causes and attack paths and recommend security controls and design improvements.
Communicate security risks, customer impact, and remediation priorities to Engineering, Product Management, customers, security stakeholders, and leadership.
Support security advisories, VEX, SBOM/SCA analysis, customer security inquiries, and applicable security and regulatory requirements.