We are looking for a Senior Product Security Engineer for the Product Security Compliance team at Red Hat. The role focuses on security and compliance functions for our digital sovereign product offerings and requires a deep technical understanding of information systems, computing solutions, and hands‑on experience leveraging AI capabilities. The team is growing and has a vision related to digital sovereignty laws worldwide. Remote work is encouraged – you may work from home as well as from local offices, and the team is globally distributed.
What You’ll Be Doing
Own the security and compliance functions related to our digital sovereign commercial product offerings and environments.
Lead technical discussions across multi‑functional engineering teams, product and sales teams, as well as with third‑party auditors.
Support the continuous improvement of Red Hat Product Security through designing, developing, and implementing automation at scale to enable the maturation of processes.
Mentor and aid the growth of junior team members.
Support the downstream integration of open‑source projects; collaborate to develop and implement Red Hat specific capabilities from the upstream.
Serve as an evangelist of security and compliance both inside Red Hat and externally, with partners, customers, or within the open‑source community.
What You Will Bring
Developed and delivered secure and attested software in programming languages such as Go and Python.
Demonstrable knowledge of applying cloud security principles and best practices to a cloud or hybrid cloud environment.
Experience using AI tools like Cursor AI, Claude, or others to accelerate product development delivery timelines.
Experience working with Kubernetes, OpenShift, Podman, or similar technologies.
Ability to analyze security controls, assess risks, and design control measures in alignment with a variety of standards and frameworks (NIST 800-53, PCI DSS, ISO 27001, etc.).
Proven track record of being effective when working remotely with a global organization and in a self‑directed capacity.
Strong communication skills, capable of presenting technical compliance concepts to both technical and non‑technical audiences.
Maintain an open mindset with a proactive interest in collaboratively evolving and improving our team’s working methodologies.
Relevant certifications, such as CISSP, CISM, CCSP, or CISA, are a plus.
Experience with open‑source software is a plus.
Equal Opportunity Policy (EEO)
Red Hat is proud to be an equal opportunity workplace and an affirmative action employer. We review applications for employment without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, age, veteran status, genetic information, physical or mental disability, medical condition, marital status, or any other basis prohibited by law.
#J-18808-Ljbffr