Product Security Engineer

Description:

VAST Data is looking for a Product Security Engineer to join our growing team!

This is a great opportunity to be part of one of the fastest-growing infrastructure companies in history, an organization that is in the center of the hurricane being created by the revolution in artificial intelligence.

"VAST's data management vision is the future of the market."- Forbes

VAST Data is the data platform company for the AI era. We are building the enterprise software infrastructure to capture, catalog, refine, enrich, and protect massive datasets and make them available for real-time data analysis and AI training and inference. Designed from the ground up to make AI simple to deploy and manage, VAST takes the cost and complexity out of deploying enterprise and AI infrastructure across data center, edge, and cloud.

Our success has been built through intense innovation, a customer-first mentality and a team of fearless VASTronauts who leverage their skills & experiences to make real market impact. This is an opportunity to be a key contributor at a pivotal time in our company’s growth and at a pivotal point in computing history.

Responsibilities

• Implement and maintain security controls for applications and systems.
• Conduct DAST, SAST, vulnerability scans, and penetration tests.
• Develop and enforce security policies and best practices.
• Monitor logs, investigate incidents, and respond to threats.
• Collaborate with development teams to ensure secure coding practices.
• Stay updated on emerging threats and industry standards.

Desired Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or equivalent experience.
• 3+ years of experience in security engineering, appsec, or penetration testing.
• Expertise in security frameworks (NIST, ISO 27001, CIS Controls) or similar.
• Experience with software composition analysis (SCA), SBOM generation, and open-source license compliance.
• Experience with Nessus, Qualys or similar, DAST, and SAST tools.
• Familiarity with cloud security (AWS, Azure, GCP).
• Certifications such as CISSP, CEH, OSCP, or CISM are a plus.

Nice To Have Skills

• OWASP Top 10 and web application security expertise.
• Proficiency in Python, Bash or other languages for automation and familiarity with Linux OS
• Experience securing CI/CD pipelines and DevSecOps practices.
• Knowledge of container security (Docker, Kubernetes).
• Understanding of IAM, Zero Trust, and compliance (GDPR, HIPAA, PCI-DSS).
• Familiarity with SOC operations and incident response.
• Strong communication skills for cross-team collaboration.
• Background in forensics, red team, malware analysis, or reverse engineering.