Senior Product Security Engineer

Red Hat Product Security is looking for a Senior Product Security Engineer to join our global Vulnerability Management Team. Red Hat’s Vulnerability Management Team responds to threats in a predictable manner that reduces risk to Red Hat portfolio and customers. We do this by identifying, assessing & mitigating all potential vulnerabilities and weaknesses that impact our Products and Services portfolio, and then orchestrating our response, by coordinating with the stakeholders. In this role, you will work closely with the Vulnerability Remediation Engineers, Security Architects, Product Managers and Developers, performing risk assessment of the vulnerabilities affecting Red Hat portfolio, and crafting the vulnerability metadata supporting our key stakeholders.
 

Primary Responsibilities

• Respond to security vulnerabilities, weaknesses and incidents, within the Red Hat portfolio of Products and Services.
• 5+ years Product Security Experience
• Contribute to customer facing security documentation, reference, and other data as used by the Common Vulnerabilities and Exposures (CVE) pages.
• Research the impact of new flaws affecting Red Hat's offerings and communicate risk to stakeholders with different technical understanding, like senior leadership, engineers, architects, etc.
• Coordinate with key stakeholders internally and externally, as appropriate, ensuring an effective management of the vulnerabilities and the security incidents
• Provide technical leadership, mentor junior engineers, and drive collaboration to deliver high-impact solutions while fostering a culture of innovation and excellence.
• Contribute in the industry coordination working groups to shape the industry wide vulnerability disclosure and coordination standards as well as to adopt and implement those standards within the organization

Required Skills

• Experienced knowledge and understanding of Linux Operating System
• Proficiency in common programming languages like C/C++, Python, Java, Go
• Familiarity with Source Code Management tools like Git
• Strong understanding of security vulnerabilities including the confidentiality, integrity, and availability triad
• Significant experience in security technologies and methodologies like authentication and authorization, encryption, and risk assessments
• Ability to work on your own in a fast-paced environment with a multicultural team distributed across multiple countries and time zones
• Outstanding written and verbal communication skills in English

The following are considered are plus: 

• Experience on Secure SDL tools and technologies like pentesting, threat modeling, etc.
• Knowledge and experience with modern container technologies: Kubernetes, Openshift; comfortable with docker/Linux containers.
• Familiarity with open source software and open source as a business model.
   

The salary range for this position is $131,420.00 - $216,870.00. Actual offer will be based on your qualifications.

Pay Transparency

Red Hat determines compensation based on several factors including but not limited to job location, experience, applicable skills and training, external market value, and internal pay equity. Annual salary is one component of Red Hat’s compensation package. This position may also be eligible for bonus, commission, and/or equity. For positions with Remote-US locations, the actual salary range for the position may differ based on location but will be commensurate with job duties and relevant work experience. 

About Red Hat

Red Hat is the world’s leading provider of enterprise open source software solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. Spread across 40+ countries, our associates work flexibly across work environments, from in-office, to office-flex, to fully remote, depending on the requirements of their role. Red Hatters are encouraged to bring their best ideas, no matter their title or tenure. We're a leader in open source because of our open and inclusive environment. We hire creative, passionate people ready to contribute their ideas, help solve complex problems, and make an impact.

Benefits
●    Comprehensive medical, dental, and vision coverage
●    Flexible Spending Account - healthcare and dependent care
●    Health Savings Account - high deductible medical plan
●    Retirement 401(k) with employer match
●    Paid time off and holidays
●    Paid pare