Product Security Engineer- Threat Researcher Job at Hewlett Packard Enterprise (Aguadilla)

Senior Product Security Engineer

Join our Product Security team, where you'll partner with development and game t...

Location

United States , Las Vegas

Salary:

Not provided

Take-Two Interactive Software, Inc.

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Technology, or a similar field, or equivalent experience
At least 5 years of demonstrated experience in application security, ideally within the gaming or technology sectors
Validated expertise in pentesting, security architecture, risk management, and securing CI/CD pipelines
Extensive knowledge of common and complex security vulnerabilities, along with effective mitigation techniques
Ability to translate design documents into security-focused guidelines and requirements for product development
Adapt quickly to new technologies, languages, and solve challenges outside your expertise

Job Responsibility

Develop threat models for a variety of applications and games to prioritize scope and use cases for security testing
Execute hands-on penetration tests and red team exercises to identify vulnerabilities in applications, infrastructure, and services
Conduct manual and automated secure code reviews in languages such as C#, Java, Python, and JavaScript, providing clear, actionable guidance to developers on vulnerability remediation
Triage, validate, and manage vulnerability reports from our bug bounty program, working with external researchers and internal teams on resolution
Develop and implement security automation tools to improve the efficiency and effectiveness of security processes
Provide security architecture and design guidance to development teams, ensuring secure coding practices are followed
Partner with teams to define and execute security strategy, driving security priorities across the organization
Stay ahead of emerging security threats, seeking and advocating for new technologies to address complex risks

What we offer

Medical (HSA & FSA)
dental
vision
401(k) with company match
employee stock purchase plan
commuter benefits
in-house wellness program
broad learning & development opportunities
a charitable giving platform with company match
Fitness allowance

Fulltime

Senior Product Security Engineer

Ready to make an impact on the security of products from the ground up? Join our...

Location

United States , Austin

Salary:

Not provided

Take-Two Interactive Software, Inc.

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Technology, or a similar field, or equivalent experience
At least 5 years of demonstrated experience in application security, ideally within the gaming or technology sectors
Validated expertise in pentesting, security architecture, risk management, and securing CI/CD pipelines to ensure seamless and secure software delivery
Extensive knowledge of common and complex security vulnerabilities, along with effective mitigation techniques
Ability to translate design documents into security-focused guidelines and requirements for product development
Adapt quickly to new technologies, languages, and solve challenges outside your expertise
Travel: No routine travel required
occasional travel as needed.

Job Responsibility

Develop threat models for a variety of applications and games to prioritize scope and use cases for security testing
Execute hands-on penetration tests and red team exercises to identify vulnerabilities in applications, infrastructure, and services
Conduct manual and automated secure code reviews in languages such as C#, Java, Python, and JavaScript, providing clear, actionable guidance to developers on vulnerability remediation
Triage, validate, and manage vulnerability reports from our bug bounty program, working with external researchers and internal teams on resolution
Develop and implement security automation tools to improve the efficiency and effectiveness of security processes
Provide security architecture and design guidance to development teams, ensuring secure coding practices are followed
Partner with teams to define and execute security strategy, driving security priorities across the organization
Stay ahead of emerging security threats, seeking and advocating for new technologies to address complex risks.

What we offer

Medical (HSA & FSA), dental, vision, 401(k) with company match, employee stock purchase plan, commuter benefits, in-house wellness program, broad learning & development opportunities, a charitable giving platform with company match
Fitness allowance, employee discount programs, discounted games & events and stocked pantries.

Fulltime

Product Security Engineer

Join Airtable as a Product Security Engineer and play a pivotal role in shaping ...

Location

United States , San Francisco; Seattle; New York City; Los Angeles

Salary:

170000.00 - 277000.00 USD / Year

Airtable

Expiration Date

Until further notice

Requirements

2+ years experience in product security and application security
Experience shipping production code
Skilled at conducting in-depth security reviews and collaborating with engineering teams
Proficient in writing clean, maintainable code
Hands-on experience with AI product security for LLM-powered products
Strong communicator and collaborator, able to drive security initiatives
Comfortable making systems as well as breaking them
Familiar with JavaScript or TypeScript, Node, Linux, and AWS or comparable technologies
Comfortable working in a fast-paced environment and contributing to long-term security strategy

Job Responsibility

Partner with product teams to review product plans, designs, and code for security considerations
Lead and implement programs that raise the bar for application and product security
Build and ship frameworks that make it easy for product engineers to ship secure code
Triage and drive remediation for findings from external penetration testers
Research emerging threats and evolving best practices, especially in AI and LLM safety
Work with advisors and third party vendors on penetration tests, security reports and compliance projects
Contribute to roadmaps, metrics and strategic planning for the product security team

What we offer

Benefits
Restricted stock units
Incentive compensation

Fulltime

Product Security Engineer

The Senior Security Engineer/Threat Researcher position will be part of Aruba Th...

Location

Puerto Rico , Aguadilla

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

B.S. or M.S. in software engineering, computer science, cybersecurity or a related field (or equivalent experience)
6+ years of professional experience in software engineering, vulnerability research, penetration testing, or a related security discipline
Programming experience in C and at least one additional language used for secure software development, such as Rust, Go, or Python
Hands-on experience with security testing tools and techniques, such as fuzzing, reverse engineering, and exploit development frameworks (e.g., Metasploit, Immunity Debugger, Ghidra, or IDA Pro)
Understanding of memory-unsafe vulnerabilities, including buffer overflows, use-after-free, integer overflows, and format string vulnerabilities, as well as mitigation techniques such as ASLR, DEP, and stack canaries
Strong knowledge of web application security, including OWASP Top 10 vulnerabilities such as XSS, SQL injection, XXE, CSRF and insecure deserialization
Familiarity with secure coding practices, threat modeling, and static and dynamic application security testing (SAST/DAST) tools
Knowledge of modern cryptographic algorithms and security protocols (e.g., TLS, IPsec, OAuth) and their implementation pitfalls
Demonstrated ability to analyze, exploit, and remediate security vulnerabilities in complex codebases
Strong written and verbal communication skills, with the ability to create detailed technical reports and convey complex concepts to both technical and non-technical stakeholders. English advanced

Job Responsibility

Conduct advanced security assessments of HPE Aruba networking products, including manual code reviews and penetration testing, to uncover vulnerabilities such as memory-unsafe errors, insecure deserialization, and authentication/authorization flaws
Develop proofs of concept (PoCs) to demonstrate the exploitability of identified vulnerabilities and provide actionable remediation guidance to engineering teams when requested
Develop and maintain custom tools to assist in vulnerability discovery, exploit development, and tracking and disclosure of vulnerabilities to the public
Assist in managing Aruba’s bug bounty program, collaborating with external researchers and product engineering teams to triage, reproduce, and remediate reported vulnerabilities
Assist in writing vulnerability disclosure bulletins and managing the process of releasing those bulletins to the public
Serve as a subject-matter expert on secure coding practices, particularly in memory-safe and memory-unsafe programming languages, and evangelize these practices across product engineering teams
Conduct original security research on non-Aruba products and technologies, including discovering new vulnerabilities, publishing papers, and presenting at leading security conferences
Positively represent Aruba in the global security community by fostering collaboration with security researchers while balancing the goals of researchers with the needs of our customers

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Product Security Engineer

The Senior Security Engineer/Threat Researcher position will be part of Aruba Th...

Location

United States , Remote

Salary:

101900.00 - 234500.00 USD / Year

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

B.S. or M.S. in software engineering, computer science, cybersecurity, or a related field (or equivalent experience)
7+ years of professional experience in software engineering, vulnerability research, penetration testing, or a related security discipline
Programming experience in C and at least one additional language used for secure software development, such as Rust, Go, or Python
Hands-on experience with security testing tools and techniques, such as fuzzing, reverse engineering, and exploit development frameworks (e.g., Metasploit, Immunity Debugger, Ghidra, or IDA Pro)
Understanding of memory-unsafe vulnerabilities, including buffer overflows, use-after-free, integer overflows, and format string vulnerabilities, as well as mitigation techniques such as ASLR, DEP, and stack canaries
Strong knowledge of web application security, including OWASP Top 10 vulnerabilities such as XSS, SQL injection, XXE, CSRF, and insecure deserialization
Familiarity with secure coding practices, threat modeling, and static and dynamic application security testing (SAST/DAST) tools
Knowledge of modern cryptographic algorithms and security protocols (e.g., TLS, IPsec, OAuth) and their implementation pitfalls
Demonstrated ability to analyze, exploit, and remediate security vulnerabilities in complex codebases
Strong written and verbal communication skills, with the ability to create detailed technical reports and convey complex concepts to both technical and non-technical stakeholders

Job Responsibility

Conduct advanced security assessments of HPE Aruba networking products, including manual code reviews and penetration testing, to uncover vulnerabilities such as memory-unsafe errors, insecure deserialization, and authentication/authorization flaws
Develop proofs of concept (PoCs) to demonstrate the exploitability of identified vulnerabilities and provide actionable remediation guidance to engineering teams when requested
Develop and maintain custom tools to assist in vulnerability discovery, exploit development, and tracking and disclosure of vulnerabilities to the public
Assist in managing Aruba’s bug bounty program, collaborating with external researchers and product engineering teams to triage, reproduce, and remediate reported vulnerabilities
Assist in writing vulnerability disclosure bulletins and managing the process of releasing those bulletins to the public
Serve as a subject-matter expert on secure coding practices, particularly in memory-safe and memory-unsafe programming languages, and evangelize these practices across product engineering teams
Conduct original security research on non-Aruba products and technologies, including discovering new vulnerabilities, publishing papers, and presenting at leading security conferences
Positively represent Aruba in the global security community by fostering collaboration with security researchers while balancing the goals of researchers with the needs of our customers.

What we offer

Comprehensive suite of benefits that supports physical, financial, and emotional wellbeing
Specific programs catered to helping employees reach career goals
Inclusive working environment.

Fulltime

Senior Security Researcher

Endor Labs is building the Application Security platform for the software develo...

Location

United States

Salary:

Not provided

Endor Labs

Expiration Date

Until further notice

Requirements

5+ years of experience in security research, vulnerability discovery, and offensive security
deep expertise in reverse engineering, exploit development, and software vulnerability analysis
strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis
experience discovering and responsibly disclosing zero-day vulnerabilities
proven track record of publishing high-quality research or presenting at top security conferences (e.g., Black Hat, DEF CON, RSAC, BSides)
proficiency in programming languages such as Python, Rust, or Go
strong analytical skills and the ability to conduct complex security research autonomously
excellent communication skills, both written and verbal, to convey technical concepts to diverse audiences.

Job Responsibility

Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities
develop and refine exploit techniques to understand modern attack vectors targeting software supply chain through malicious code, 3rd party libraries, and CI/CD systems
work closely with Product Management to translate research findings into innovative security capabilities within Endor Labs' products
publish research findings through technical blogs, white papers, and industry-leading security conferences
collaborate with security engineers and developers to prototype and implement detection and mitigation strategies for emerging threats
contribute to the security community by developing open-source tools, methodologies, or frameworks that enhance software supply chain security
stay ahead of the latest threats, attacker methodologies, and evolving security trends to continuously refine our research efforts.

What we offer

Work with a world-class team dedicated to pushing the boundaries of security research
directly influence the security of modern software supply chains
a culture that values innovation, collaboration, and continuous learning
competitive compensation, flexible work environment, and a generous benefits package
opportunity to present groundbreaking research and contribute to the global security community.

Fulltime

Senior AI Security Engineer

Senior AI Security Engineer role in Citi's Application, Platform and Engineering...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Production system builder with security focus - proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
Ethical hacking and penetration testing expertise - hands-on experience finding and exploiting vulnerabilities, conducting red team exercises
State-of-the-art security engineering with Go, Python, JavaScript
HashiCorp Vault mastery - deep experience writing custom plugins, creating secrets engines, implementing dynamic credentials
Enterprise authentication & authorization - designing and implementing OAuth, JWT, RBAC, and complex identity systems
API security and threat modelling - securing REST/GraphQL APIs, conducting threat assessments
AI/ML security and vulnerability research - understanding of LLM vulnerabilities, model security, prompt injection attacks
Security automation and tooling – automating manual security processes
Cloud-native security - securing containerized applications in Kubernetes, service mesh security
Incident response and forensics - experience investigating, analyzing, and responding to security incidents

Job Responsibility

Build secure AI products from 0-1 - Engineer production-grade, business-facing AI platforms with security built-in from day one
Conduct ethical hacking and red team activities - penetration testing, vulnerability research, and attack simulation
Design and build security tools and frameworks - Create automated security solutions that scale across fast-paced development cycles
Secure novel AI attack surfaces - Identify and mitigate LLM-specific vulnerabilities, prompt injection attacks, and AI model security risks
Lead 'shift left' security - Embed security practices throughout rapid development lifecycle while maintaining velocity
Mentor security practices - Guide other engineers on secure coding, vulnerability remediation, and security-first thinking

What we offer

27 days annual leave (plus bank holidays)
Discretional annual performance related bonus
Private Medical Care & Life Insurance
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Hybrid working model (up to 2 days working at home per week)
Competitive base salary (annually reviewed)

Fulltime

Security Engineering Lead

Citi's Application, Platform and Engineering team is looking for a Security Engi...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Bring your deep-dive application security engineering expertise from building production systems
thrive in a results-driven environment, where flexibility fuels impact
be a game-changer, ready to step beyond your designated role
love the synergy of pair programming
seize the opportunity to secure AI applications at scale
have a relentless passion to learn more about AI security, LLM attacks, and bringing your knowledge to shape Citi's secure AI future
proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
hands-on experience finding and exploiting vulnerabilities, conducting red team exercises, and thinking like an attacker to strengthen defenses
experience building security tools and secure production systems with Go, Python, JavaScript
deep experience with HashiCorp Vault for enterprise-scale secrets management

Job Responsibility

Build secure AI products
conduct penetration testing and vulnerability research
design automated security solutions
identify and mitigate AI-specific vulnerabilities
lead security practices in development lifecycles
mentor engineers on secure coding practices.

What we offer

27 days annual leave plus bank holidays
discretional annual performance-related bonus
private medical care and life insurance
employee assistance program
pension plan
paid parental leave
special discounts for employees, family, and friends

Fulltime

Product Security Engineer- Threat Researcher

Hewlett Packard Enterprise

Location:
Puerto Rico , Aguadilla

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
July 09, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Product Security Engineer- Threat Researcher

Senior Product Security Engineer

Senior Product Security Engineer

Product Security Engineer

Product Security Engineer

Product Security Engineer

Senior Security Researcher

Senior AI Security Engineer

Security Engineering Lead

Product Security Engineer- Threat Researcher

Hewlett Packard Enterprise

Location:Puerto Rico , Aguadilla

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:July 09, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Product Security Engineer- Threat Researcher

Senior Product Security Engineer

Senior Product Security Engineer

Product Security Engineer

Product Security Engineer

Product Security Engineer

Senior Security Researcher

Senior AI Security Engineer

Security Engineering Lead

Location:
Puerto Rico , Aguadilla

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
July 09, 2025