The Product Security Engineer strengthens Hitachi Vantara's product security across the Software Development Lifecycle (SDLC), driving vulnerability management, security assessments, remediation, Secure SDLC, and DevSecOps initiatives in collaboration with Engineering, Product, Cloud Operations, Support, and Security teams.
Responsibilities
Develop understanding of product architecture, technology stacks, APIs, integrations, and deployment models; act as the primary security contact for Engineering, Product, and Support teams.
Identify product security risks and support security assessments and customer escalations.
Perform vulnerability triage, reproduction, validation, and risk assessment using CVSS, exploitability, and business/customer impact.
Lead vulnerability identification, prioritization, remediation, and reporting across SAST, DAST, SCA, penetration tests, bug bounty programs, and customer-reported issues.
Establish remediation SLAs, track findings to closure, validate fixes, and drive root cause analysis and corrective actions.
Experienced backend engineer to design, build, and evolve distributed systems in Go that power communication at massive scale.
Compensation
Starting salary for this role is $150,000 - $200,000 USD (or equivalent in local currency) depending on experience and subject to market rate adjustment.
Responsibilities
Design and build distributed systems in Go that help customers send timely, relevant messages at scale
Collaborate across teams to debug issues and deliver reliable solutions
Own problems end to end - from architecture and schema design to testing, deployment, and monitoring
Participate in an on-call rotation as required, supporting the reliability of the systems you build
Share knowledge and raise the bar through sharing your progress publicly with short videos, thoughtful writing, and mentorship
Lead the internal red team capability, designing and executing adversarial simulations across Nebius’ cloud platform and translating findings into measurable security improvements.
Compensation
Competitive compensation with equity upside in a Nasdaq-listed, high-growth company.
Responsibilities
Build and lead a red team function within Product Security Team, hiring and developing offensive security engineers.
Validate and extend early-stage Secure SDLC threat models via continuous penetration testing, assessing threat severity and mitigation status while challenging assumptions made during threat modeling and system development.
Plan and execute full-scoped red team engagements against Nebius cloud platform, including compute, storage, inference, networking, orchestration layers, and internal tooling.
Research novel attacks against GPU infrastructure, inference stack, and AI platform managed services.
Conduct targeted assessments of new products and infrastructure changes before they ship.
The Product Security Engineer strengthens Hitachi Vantara's product security across the Software Development Lifecycle (SDLC), driving vulnerability management, security assessments, remediation, Secure SDLC, and DevSecOps initiatives in collaboration with Engineering, Product, Cloud Operations, Support, and Security teams.
Responsibilities
Develop understanding of product architecture, technology stacks, APIs, integrations, and deployment models; act as the primary security contact for Engineering, Product, and Support teams.
Identify product security risks and support security assessments and customer escalations.
Perform vulnerability triage, reproduction, validation, and risk assessment using CVSS, exploitability, and business/customer impact.
Lead vulnerability identification, prioritization, remediation, and reporting across SAST, DAST, SCA, penetration tests, bug bounty programs, and customer-reported issues.
Establish remediation SLAs, track findings to closure, validate fixes, and drive root cause analysis and corrective actions.
A customer-facing Senior Solutions Engineer to support sales of SS8’s portfolio across Law Enforcement (LEA), Intelligence Community (IC), and Communications Service Providers (CSPs) across the APAC region. This role sits at the intersection of deep technical expertise and strategic sales.
Locations (2)
California, United States
Washington, D.C., United States
Compensation
The base salary range for this position in California is $120,000 – $160,000 annually. Base salary for Washington, D.C. and other U.S. locations will vary and is generally lower, depending on geographic market factors. This role is eligible for commission, with on-target earnings (OTE) for California hires expected to range from $150,000 to $190,000 annually, with lower ranges in Washington, D.C. and other locations.
Responsibilities
Lead technical discovery sessions to understand customer mission requirements across lawful intercept, location intelligence, and data analytics.
Represent SS8 and its partner ecosystem in designing and delivering end-to-end solutions tailored to customer and prospect requirements spanning telecom networks, data collection, mediation, analytics, and visualization platforms.
Design and build distributed systems in Go that help customers send timely, relevant messages at scale
Compensation
Starting salary for this role is $150,000 - $200,000 USD (or equivalent in local currency) depending on experience and subject to market rate adjustment. In addition to base salary, this role includes an equity grant in the form of stock options
Responsibilities
Design and build distributed systems in Go
Collaborate across teams to debug issues and deliver reliable solutions
Own problems end to end from architecture and schema design to testing, deployment, and monitoring
Participate in an on-call rotation as required
Share knowledge and raise the bar through public sharing and mentorship
You are the security architect for our research pipeline. You will define how we securely conduct research across our compute cluster and cloud environments, partnering closely with our compute team and engineers to make CI/CD, automated research agents, and large-scale compute secure by default.
Build security guardrails directly into our pipelines so that every deployment (manual or agent-driven) is automatically scanned, verified, and compliant
Establish workflows where agents can test their own code and infrastructure changes against security policies before reaching production
Lead the implementation of 'compliance as code', automating the auditing and enforcement of security configurations across our AWS, GCP, and neocloud footprints in Terraform
Establish and harden the source-control environment for research code (e.g. GitHub): secret scanning, dependency and code scanning, and branch protections