Product Security Engineer

Infoblox • Tacoma, WA

18h • $81,500 - $118,800 • Hybrid

About The Position

At Infoblox, every breakthrough begins with a bold “what if.”
What if your ideas could ignite global innovation?
What if your curiosity could redefine the future?
We invite you to step into the next exciting chapter of your career journey. Bring your creativity, drive, your daring spirit, and feel what it’s like to thrive on a team big enough to make an impact, yet small enough to make a difference. Our cloud-first networking and security solutions already protect 70% of the Fortune 500, and we’re looking for creative thinkers ready to push that influence even further. Join us and discover how far your bold “what if” can take the world, your community, and your career.
Here, how we empower our people is extraordinary: Glassdoor Best Places to Work 2025, Great Place to Work-Certified in five countries, and Cigna Healthy Workforce honors three years running — and what we build is world-class: recognized as CybersecAsia’s Best in Critical Infrastructure 2024 — evidence that when first-class technology meets empowered talent, remarkable careers take shape. So, what if the next big idea, and the next great career story, comes from you? Become the force that turns every “what if” into “what’s next”.
Product Security Engineer
Infoblox is seeking a Product Security Engineer focused on Product Security Assurance to join our team in Tacoma, WA. In this hybrid role, you will bridge the gap between customer expectations and engineering reality. You will be responsible for validating our security posture through inquiries and audits, while actively driving security improvements by identifying and managing product risks. We seek a builder who will learn, understand, and translate security risks into pragmatic solutions through direct partnership with development teams. You will leverage the deep knowledge gained from mastering our products, controls, and regulatory requirements to strategically plan, build, and implement effective security controls.
You’re the ideal candidate if you are passionate about understanding the bigger picture through cybersecurity risk management, enjoy solving complex problems, and thrive in collaborative environments.
Technologies you will be working with:
Kubernetes, Containers, AWS, GCP, Azure, OCI, SAST, DAST, SIEM, EDR, CWPP, Serverless Functions, CSPM, CNAPP, WAF, LLM’s, etc.

Requirements

• The Translator’s Tongue: Exceptional written and verbal communication skills. You must be able to translate complex engineering realities into clear, reassuring language for customers, and conversely, translate rigid compliance requirements into pragmatic tasks for engineers.
• 2 years experience in Risk & Compliance: A solid grasp of information security principles (CIA Triad), common frameworks (NIST, SOC2, ISO 27001), and the ability to distinguish between a theoretical vulnerability and a business risk.
• The Automator’s Instinct: Familiarity with scripting languages (Python preferred) and a refusal to perform the same manual task endlessly. You see a spreadsheet and immediately wonder how to turn it into a script.
• Technical Curiosity: A foundational understanding of modern infrastructure—Cloud (AWS/Azure/GCP), Containers (Kubernetes), and Networking—and a burning desire to learn how to secure them.
• Problem-Solving Agility: The ability to navigate ambiguity. When faced with a complex customer question or a vague audit requirement, you dig for the truth rather than waiting for an answer.
• A "Secure by Design" Mindset: Familiarity with the Software Development Life Cycle (SDLC) and an interest in how security tools (SAST/DAST) integrate into CI/CD pipelines.
• Emerging Tech Awareness: An interest in AI/ML security and the evolving landscape of threats (OWASP Top 10 for LLMs), viewing them as the next frontier to conquer.
• Bachelor’s degree in Computer Science, Engineering, Information Security, or a related field
• Current or recent graduate student pursuing a Master’s degree in Computer Science, Engineering, Information Security, or a related field

Responsibilities

• Own the Trust Narrative: Manage and respond to customer security inquiries (RFIs/RFPs) and questionnaires, serving as the primary translator of our security controls to the outside world.
• Drive Audit Readiness: Orchestrate the gathering of evidence and artifacts for external audits and internal compliance reviews, ensuring our adherence to regulatory frameworks.
• Manage Product Risk: Actively identify, track, and help triage product security risks, working with engineering teams to translate complex findings into pragmatic remediation plans.
• Automate Assurance: Analyze repetitive inquiries and manual compliance tasks to design and build automation (using Python or similar tools) that streamlines the assurance workflow.
• Bridge to Engineering: Leverage your deep understanding of our control environment to participate in threat modeling and design reviews for new features, including cloud-native and AI-driven architectures.
• Build Security Controls: Transition from identifying risks to preventing them by helping to plan and implement effective security guardrails and automated checks in the CI/CD pipeline.
• Enable the Organization: Create and maintain dynamic security documentation and training materials that empower engineering teams to build securely by design.
• Become a Cloud and Application Security Expert: Gain hands-on experience across a modern, cloud-native environment—Kubernetes, AWS, GCP, Azure, and CNAPP platforms—while learning deeply about how Infoblox products work.

Benefits

• Comprehensive health coverage, generous PTO, and flexible work options
• Learning opportunities, career-mobility programs, and leadership workshops
• Sixteen paid volunteer hours each year, global employee resource groups, and a “No Jerks” policy that keeps collaboration healthy
• Modern offices with EV charging, healthy snacks (and the occasional cupcake), plus hackathons, game nights, and culture celebrations
• Charitable Giving Program supported by Company Match

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level