Technical Product Security Engineer

At Red Hat, we connect an innovative community of customers, partners, and contributors to deliver an open source stack of trusted, high-performing solutions. We offer cloud, Linux, middleware, storage, and virtualization technologies, together with award-winning global customer support, consulting, and implementation services. Red Hat is a rapidly growing company supporting more than 90% of Fortune 500 companies.

The Red Hat Product Security Compliance team is seeking a knowledgeable and proactive Product Security Engineer to achieve our security and compliance objectives.The team is growing and we have a big vision. In this role,  you should have an excellent ability to solve problems using your in-depth technical understanding of information systems and computing solutions. Be a team player who works and coordinates well with the team.

Red Hat embraces a remote working culture and promotes work flexibility. This team, and many of the people you would work with, are remote and you would be welcome to work from home as well.

What you will do:

• Responsible for the maintenance, configuration, and reliable operation of systems related to our Commercial and FedRAMP environments.

• Maintain accurate documentation for compliance audits, including access controls, configurations, and activity logs; generate reports for internal and external audits.

• Comfortable leading technical discussions across multi-functional teams such as engineering, InfoSec and third party auditors.

• Troubleshoot hardware and software errors and communicate clearly about remediation steps to ensure we remain compliant.

• Research and analyze new tools, technologies and services for technical suitability within a containerized environment.

• Partner with our preferred vendor(s) and internal teams to establish high availability plans, disaster recovery processes, and back-up processes as necessary.

What you will bring:

• Strong knowledge of IDPs, ticketing systems, and vulnerability scanners.

• Experience with scripting and automation tools.

• Proven track record of being effective when working remotely and in a self-directed capacity.

• Knowledge of cloud security practices and technologies is essential.

• Ability to analyze security controls, assess risks, and design control measures in alignment with FedRAMP standards.

• Strong communication skills, capable of presenting technical compliance concepts to both technical and non-technical audiences.

• Familiarity with cloud service provider environments (e.g., AWS, Azure) and relevant security tools (e.g.,vulnerability management).

• Relevant certifications, such as CISSP, CISM, CCSP, or CISA, are highly preferred.

• Experience with open-source software vulnerability and supply chain management is a plus. 

• US-citizenship.

The salary range for this position is $101,300.00 - $162,050.00. Actual offer will be based on your qualifications.

Pay Transparency

Red Hat determines compensation based on several factors including but not limited to job location, experience, applicable skills and training, external market value, and internal pay equity. Annual salary is one component of Red Hat’s compensation package. This position may also be eligible for bonus, commission, and/or equity. For positions with Remote-US locations, the actual salary range for the position may differ based on location but will be commensurate with job duties and relevant work experience. 

About Red Hat

Red Hat is the world’s leading provider of enterprise open source software solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. Spread across 40+ countries, our associates work flexibly across work environments, from in-office, to office-flex, to fully remote, depending on the requirements of their role. Red Hatters are encouraged to bring their best ideas, no matter their title or tenure. We're a leader in open source because of our open and inclusive environment. We hire creative, passionate people ready to contribute their ideas, help solve complex problems, and make an impact.

Benefits
●    Comprehensive