Associate Product Security Engineer

Job Summary

Red Hat Product Security is looking for an Associate Product Security Engineer to join us in Boston. Red Hat’s Incident Response Team responds to threats in a predictable manner that reduces risk to Red Hat portfolio and customers. We do this by identifying, triaging & mitigating all potential vulnerabilities and weaknesses that impact our Products and Services offerings, and then orchestrating our response, by coordinating with the stakeholders. In this role, you will work closely with Security Architects, Product Managers and Developers, handling the vulnerability response process from initial analysis to the release of errata.

Primary Responsibilities

• Respond to security vulnerabilities, weaknesses and incidents, within the Red Hat portfolio of Products and Services.

• Identify, triage and formalize mitigation for the vulnerabilities and weaknesses impacting Red Hat offerings

• Coordinate with key stakeholders internally and externally, as appropriate, ensuring an effective management of the vulnerabilities and the security incidents

• Work with developers to improve the software development life cycle resulting in more secure Red Hat Products and Services

• Contribute to customer facing security documentation, reference, and other data as used by the Common Vulnerabilities and Exposures (CVE) pages.

• Research the impact of new flaws affecting Red Hat's offerings and communicate risk to stakeholders with different technical understanding, like senior leadership, engineers, architects, etc.

• Manage our vulnerability response work process without SLA misses

Required Skills

• Basic knowledge and understanding of Linux Operating System

• Keen interest in security technologies and methodologies like authentication and authorization, encryption, and risk assessments

• Solid understanding of security vulnerabilities including the confidentiality, integrity, and availability triade

• Experience with and skills in triage and analysis, e.g., building a reproducer which demonstrates a software bug exists

• Excellent organizational skills

• Ability to work on your own in a fast-paced environment with a multicultural team distributed across multiple countries and time zones

• Outstanding written and verbal communication skills in English

The following are considered are plus: 

• Knowledge of the Getting Things Done (GTD) productivity system

• Experience with Linux; system administration experience 

• Experience using cloud-based technologies 

• Familiarity with open source software development

The salary range for this position is $80,770.00 - $129,160.00. Actual offer will be based on your qualifications.

Pay Transparency

Red Hat determines compensation based on several factors including but not limited to job location, experience, applicable skills and training, external market value, and internal pay equity. Annual salary is one component of Red Hat’s compensation package. This position may also be eligible for bonus, commission, and/or equity. For positions with Remote-US locations, the actual salary range for the position may differ based on location but will be commensurate with job duties and relevant work experience. 

About Red Hat

Red Hat is the world’s leading provider of enterprise open source software solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. Spread across 40+ countries, our associates have the flexibility to choose the work environment that suits their needs from in-office to fully remote to office-flex. Red Hatters are encouraged to bring their best ideas, no matter their title or tenure. We're a leader in open source because of our open and inclusive environment. We hire creative, passionate people ready to contribute their ideas, help solve complex problems, and make an impact. Opportunities are open. Join us.

Benefits
●    Comprehensive medical, dental, and vision coverage
●    Flexible Spending Account - healthcare and dependent care
●    Health Savings Account - high d