Senior Product Security Engineer

About the Job: At Red Hat, we connect an innovative community of customers, partners, and contributors to deliver an open source stack of trusted, high-performing solutions. We offer cloud, Linux, middleware, storage, and virtualization technologies, together with award-winning global customer support, consulting, and implementation services. Red Hat is a well-established company, supporting more than 90% of Fortune 500 companies as well as governments, agencies, and NGOs around the world. The Red Hat Product Security Compliance team is seeking a knowledgeable and proactive Senior Product Security Engineer to achieve our security and compliance objectives. The team is growing and we have a big vision particularly as it relates to burgeoning digital sovereignty laws and efforts worldwide. In this role, you should have an excellent ability to solve problems using not just your in-depth technical understanding of information systems and computing solutions, but also hands-on experience leveraging AI capabilities. You should also be a team player who works and coordinates well with a globally distributed team. Red Hat embraces a remote working culture and promotes work flexibility. This team, and many of the people you would work with, are remote and you would be welcome to work from home as well as in the local office. What you’ll be doing: Own the security and compliance functions related to our digital sovereign commercial product offerings and environments. Lead technical discussions across multi-functional engineering teams, product and sales teams, as well as with third party auditors. Support the continuous improvement of Red Hat Product Security through designing, developing, and implementing automation at scale to enable the maturation of processes. Mentor and aid the growth of junior team members Support the downstream integration of open-sourced projects; collaborate to develop and implement Red Hat specific capabilities from the upstream. Serve as an evangelist of security and compliance both inside Red Hat and externally, with partners, customers, or within the open-source community. What you will bring: Have developed and delivered secure and attested software in programming languages such as Go and Python. Demonstrable knowledge of applying cloud security principles and best practices to a cloud or hybrid cloud environment. Experience using AI tools like Cursor AI, Claude, or others to accelerate product development delivery timelines. Experience working with Kubernetes, OpenShift, Podman, or similar technologies. Ability to analyze security controls, assess risks, and design control measures in alignment with a variety of standards and frameworks (NIST 800-53, PCI DSS, ISO 27001, etc.). Proven track record of being effective when working remotely with a global organization and in a self-directed capacity. Strong communication skills, capable of presenting technical compliance concepts to both technical and non-technical audiences. Maintain an open mindset with a proactive interest in collaboratively evolving and improving our team's working methodologies. Relevant certifications, such as CISSP, CISM, CCSP, or CISA, are a plus. Experience with open-source software is a plus. #LI-AK1 About Red Hat Red Hat is the world’s leading provider of enterprise open source software solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. Spread across 40 countries, our associates work flexibly across work environments, from in-office, to office-flex, to fully remote, depending on the requirements of their role. Red Hatters are encouraged to bring their best ideas, no matter their title or tenure. We're a leader in open source because of our open and inclusive environment. We hire creative, passionate people ready to contribute their ideas, help solve complex problems, and make an impact. Inclusion at Red Hat Red Hat’s culture is buil ... (truncated, view full listing at source)