{"id":3992899,"url":"https://alion.io/job/hitachi-product-security-engineer","title":"Product Security Engineer","company":{"id":129,"name":"Hitachi","domain":"hitachi.com","url":"https://alion.io/company/hitachi","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":598,"ghost_share":0.005,"stale_share":0.734,"repost_share":0.015,"time_to_fill_p50_days":17,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"CWE","optional":false},{"name":"Docker","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SOC 2","optional":false},{"name":"SonarQube","optional":false},{"name":"Active Directory","optional":true},{"name":"Amazon S3","optional":true},{"name":"JavaScript","optional":true},{"name":"LDAP","optional":true},{"name":"PKI","optional":true},{"name":"Rest API","optional":true}],"status":"live","first_seen_at":"2026-11-09T00:00:00Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-10T00:06:05Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Function\nEngineeringOur Company\nWe’re Hitachi Vantara, the data foundation trusted by the world’s innovators. Our resilient, high-performance data infrastructure means that customers - from banks to theme parks ­- can focus on achieving the incredible with data.\nIf you’ve seen the Las Vegas Sphere, you’ve seen just one example of how we empower businesses to automate, optimize, innovate - and wow their customers. Right now, we’re laying the foundation for our next wave of growth. We’re looking for people who love being part of a diverse, global team - and who get excited about making a real-world impact with data.\nJob description\nProduct Security Engineer\nRole Summary\nThe Product Security Engineer strengthens Hitachi Vantara's product security across the Software Development Lifecycle (SDLC), driving vulnerability management, security assessments, remediation, Secure SDLC, and DevSecOps initiatives in collaboration with Engineering, Product, Cloud Operations, Support, and Security teams.\nKey Responsibilities\n1. Product Security Expertise\nDevelop understanding of product architecture, technology stacks, APIs, integrations, and deployment models; act as the primary security contact for Engineering, Product, and Support teams.\nIdentify product security risks and support security assessments and customer escalations.\nFamiliarity with NFS, SMB, LDAP, Active Directory, Kerberos, TLS/SSH, PKI, REST API security, access controls, Amazon S3, tenant isolation, Kubernetes RBAC, secrets management, and encryption.\n2. Security Triage & Vulnerability Management\nPerform vulnerability triage, reproduction, validation, and risk assessment using CVSS, exploitability, and business/customer impact.\nLead vulnerability identification, prioritization, remediation, and reporting across SAST, DAST, SCA, penetration tests, bug bounty programs, and customer-reported issues.\nEstablish remediation SLAs, track findings to closure, validate fixes, and drive root cause analysis and corrective actions.\n3. Secure Software Development & DevSecOps\nPromote Secure SDLC and secure coding practices across Java, Python, Node.js, .NET, and cloud-native applications.\nDevelop security standards, conduct code reviews, validate fixes, and guide engineering teams on sustainable remediation.\nIntegrate security controls and scanning tools into CI/CD pipelines, automate security validation, and promote shift-left practices.\nSupport security implementation across Kubernetes, Docker, containers, IaC, and cloud-native deployment pipelines.\n4. Incident Response & Governance\nInvestigate and remediate product security incidents, conduct root cause analysis, and recommend preventive controls.\nCollaborate with Engineering, Cloud Operations, Support, and Security teams during incident response.\nSupport SOC 2, ISO 27001, NIST, CIS, customer security assessments, audits, evidence collection, and remediation tracking.\nMaintain security documentation and ensure alignment with corporate security policies and risk governance frameworks.\n5. Security Leadership & Enablement\nAct as Product Security SME, mentor teams on security best practices, and deliver security awareness and secure coding training.\nStay updated on emerging vulnerabilities, threats, attack techniques, and mitigation strategies.\nRequired Skills & Experience\n8+ years of experience in Application Security, Product Security, Cybersecurity, DevSecOps, or Software Engineering.\nStrong knowledge of OWASP Top 10, CWE, CVSS, secure coding, vulnerability assessment, security triage, remediation, and risk analysis.\nUnderstanding of enterprise architectures, APIs, microservices, distributed systems, SaaS, OAuth, OIDC, SAML, and IAM.\nHands-on experience with Black Duck, Black Duck SRM, AppScan, Qualys, SonarQube, Burp Suite, and dependency scanning tools.\nFamiliarity with Kubernetes, Docker, CI/CD security, DevSecOps, AWS/Azure, container security, and cloud-native environments.\nProven vulnerability remediation experience with strong analytical, troubleshooting, and cross-functional collaboration skills.\nPreferred Certifications\nCISSP, CSSLP, Security+, GIAC, CCSP, AWS Security, or Azure Security.\nSuccess Metrics\nReduced critical/high vulnerabilities and security incidents.\nImproved remediation SLAs and vulnerability resolution.\nIncreased DevSecOps adoption and security automation.\nImproved product security, compliance, and audit readiness.\nEnhanced security awareness across Engineering and Support teams.\nWorks Closely With: Engineering Managers, Product Owners, Architects, DevOps Leads, Customer Support, Security Operations, and Customer Escalation Teams.\nAbout us\nWe’re a global team of innovators. Together, we harness engineering excellence and passion for insight to co-create meaningful solutions to complex challenges. We turn organizations into data-driven leaders that can a make positive impact on their industries and society. If you believe that innovation can inspire the future, this is the place to fulfil your purpose and achieve your potential.\nFostering innovation through diverse perspectives\nHitachi is a global company operating across a wide range of industries and regions. One of the things that sets Hitachi apart is the diversity of our business and people, which drives our innovation and growth.\nWe are committed to building an inclusive culture based on mutual respect and merit-based systems. We believe that when people feel valued, heard, and safe to express themselves, they do their best work.\nHow we look after you\nWe help take care of your today and tomorrow with industry-leading benefits, support, and services that look after your holistic health and wellbeing. We’re also champions of life balance and offer flexible arrangements that work for you (role and location dependent). We’re always looking for new ways of working that bring out our best, which leads to unexpected ideas. So here, you’ll experience a sense of belonging, and discover autonomy, freedom, and ownership as you work alongside talented people you enjoy sharing knowledge with.\nWe’re proud to say we’re an equal opportunity employer and welcome all applicants for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, age, disability status or any other protected characteristic. Should you need reasonable accommodations during the recruitment process, please let us know so that we can do our best to set you up for success.","description_format":"text","description_chars":6481,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Enterprise Storage Systems","IT Consulting & Digital Transformation","Systems Integrators","Electrical Equipment & Cables"],"lifecycle":[{"event":"open","at":"2026-11-10T00:06:05Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":17,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-10T01:48:01Z"},"pay":null,"html_url":"https://alion.io/job/hitachi-product-security-engineer","json_url":"https://alion.io/job/hitachi-product-security-engineer.json","meta":{"generated_at":"2026-11-10T01:48:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4157,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":129},"rest":"https://alion.io/mcp/rest/get_company?id=129"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhitachi-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhitachi-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhitachi-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hitachi-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhitachi-product-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3992899}},{"tool":"search_jobs","arguments":{"company":"hitachi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3992899},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}