Security Engineer II, Cloud Security

Security Engineer II - Cloud Security

US - Remote

JR103846

About The Team

HashiCorp’s Cloud Infrastructure & Platform Security team is responsible for the security of HashiCorp’s cloud - both our cloud service provider (AWS, Azure, GCP) environments and our underlying HCP platform infrastructure.This is a fully remote team. While prior experience working remotely isn't required, we are looking for team members who perform well given a high level of independence and autonomy.

What you’ll do

This role provides a great opportunity for those who are passionate about advancing our security posture in a multi-cloud estate, those passionate about building scalable software to solve security problems, and, especially, those who are passionate about both.

As a Member Of The Team, You’ll Help

• Define insightful metrics to further guide our cloud security posture and progress.
• Ensure we have best practices implemented across our multi-cloud environment.
• Partner with engineering and other stakeholders to define and drive secure-by-default environments supporting our products and the enterprise.
• Develop tooling to drive our cloud security program forward.
  
  

What You’ll Need (basic Qualifications)

• You have a broad understanding of the fundamentals of AWS security. It’s a plus if you can explain their policy evaluation logic.
• You find topics like Building a Data Perimeter on AWS interesting.
• You have 3+ years of software development experience in Go and/or Python.
• You have experience codifying infrastructure and deployment pipelines (Terraform and GitHub Actions preferred).
• You have strong written and verbal communication skills and have experience articulating security risk to stakeholders across an organization.
• You are able to seek out opportunities for a high-degree of positive impact and outline paths forward without explicit direction.
• You agree with, understand, and consistently display the principles of HashiCorp in your interactions and in your work.
  
  

What’s Nice To Have (preferred Qualifications)

• You have a broad understanding of the fundamentals of Azure security.
• You have experience utilizing Azure Policies to enforce security standards across an Azure tenant.
  
  

“HashiCorp is an IBM subsidiary which has been acquired by IBM and will be integrated into the IBM organization. HashiCorp will be the hiring entity. By proceeding with this application you understand that HashiCorp will share your personal information with other IBM subsidiaries involved in your recruitment process, wherever these are located. More information on how IBM protects your personal information, including the safeguards in case of cross-border data transfer, are available here: link to IBM privacy statement.”