Product Security Architect (Remote US)
Hitachi, Ltd.3 days ago
Remote, United StatesSenior
Base Salary
$130k - $160k/yr
Responsibilities
- Lead threat modeling and security architecture assessments for VSP One Object/File.
- Investigate CVEs for applicability, reachability, exploitability, and customer impact.
- Perform targeted penetration testing and vulnerability validation using security tools.
- Develop proof-of-concept tests, reproduce vulnerabilities, and independently verify remediation.
- Partner with Engineering to identify root causes and attack paths and recommend security controls and design improvements.
- Review source code, Kubernetes YAML, Helm charts, scripts, configurations, SBOMs, and third-party dependencies.
- Support security advisories, VEX, SBOM/SCA analysis, customer security inquiries, and applicable security and regulatory requirements.
- Communicate security risks, customer impact, and remediation priorities to Engineering, Product Management, customers, security stakeholders, and leadership.
Requirements
- 5+ years of hands-on experience in product, application, cloud, container, infrastructure security, or penetration testing.
- Strong experience securing Kubernetes-based, containerized, storage, or complex distributed platforms.
- Deep understanding of Kubernetes, Linux, network and API security, authentication and authorization, secrets management, TLS/mTLS, encryption, and key management.
- Experience assessing object or file storage, including S3-compatible interfaces, access controls, multitenancy, and data-protection boundaries.
- Proven ability to investigate CVEs and determine product applicability, reachability, exploitability, and actual customer impact.
- Hands-on penetration testing and vulnerability validation experience with tools such as kubectl, Trivy, Grype, Burp Suite, OpenSSL, and Nmap.
- Strong written and verbal communication skills with the ability to translate security risks into actionable engineering recommendations.
- CKS, OSCP, GPEN, or CISSP certifications are preferred, although demonstrated hands-on security expertise is valued above certification alone.
- Candidates must be legally authorized to work in the United States and must not require sponsorship now or in the future.
Benefits
- Remote US position.
- Employees are eligible for bonus, variable, or commission pay programs where applicable, subject to program conditions and restrictions.
- Benefits include support for holistic health and wellbeing, flexible arrangements where role and location permit, and a focus on work-life balance.
- The company offers an inclusive workplace and reasonable accommodations during the recruitment process.
Tech Stack
Categories
About Hitachi, Ltd.
Hitachi, Ltd. builds industrial, energy, rail, and digital systems for governments and enterprises, combining operational technology with IT, cloud, and data infrastructure services. Its portfolio spans power grids, factory automation, data centers, rail systems, and consulting delivered through units such as Hitachi Vantara, Hitachi Rail, and Hitachi Energy. Founded in 1910 and headquartered in Tokyo, it is listed on the Tokyo Stock Exchange and operates globally across critical infrastructure markets.