Job Description

About the Team

HashiCorp’s Cloud Infrastructure & Platform Security team is responsible for the security of HashiCorp’s cloud - both our cloud service provider (AWS, Azure, GCP) environments and our underlying HCP platform infrastructure.

This is a hybrid role on a globally distributed team.

What you’ll do

This role provides a great opportunity for those who are passionate about advancing our security posture in a multi-cloud estate, those passionate about building scalable software to solve security problems, and, especially, those who are passionate about both.

As a member of the team, you’ll help:

• Define insightful metrics to further guide our cloud security posture and progress.
• Ensure we have best practices implemented across our multi-cloud environment.  
• Partner with engineering and other stakeholders to define and drive secure-by-default environments supporting our products and the enterprise.
• Develop tooling to drive our cloud security program forward.

What you’ll need (basic qualifications)

• You have 5+ years of experience securing cloud infrastructure.
• You have a broad understanding of the fundamentals of AWS security. It’s a plus if you can explain their policy evaluation logic. 
• You find topics like Building a Data Perimeter on AWS interesting.
• You have 3+ years of software development experience (Go and/or Python preferred).
• You have experience codifying infrastructure and deployment pipelines (Terraform and GitHub Actions preferred).
• You are willing to participate in an on-call rotation that responds to infrastructure incidents.
• You have strong written and verbal communication skills and have experience articulating security risk to stakeholders across an organization.
• You are able to seek out opportunities for a high-degree of positive impact and outline paths forward without explicit direction.
• You agree with, understand, and consistently display the principles of HashiCorp in your interactions and in your work.

What’s nice to have (preferred qualifications)

• You have a broad understanding of the fundamentals of Azure security.
• You have experience utilizing Azure Policies to enforce security standards across an Azure tenant.