[Remote] Product Security Research Engineer

Note: The job is a remote job and is open to candidates in USA. Mastech Digital is seeking a Product Security Research Engineer to join their team in San Jose, CA. This role focuses on the proactive discovery and validation of attack paths within the Nutanix product ecosystem, requiring a deep understanding of software vulnerabilities and the ability to translate offensive research into preventative measures.ResponsibilitiesAttack Path Discovery: Partner with Security Architects to identify and technically validate potential exploit sequences. You will engineer proofs-of-concept to demonstrate how individual vulnerabilities can be linked to create significant product exposureImpact Analysis: Perform deep-dive technical research to determine the exact “blast radius” of a vulnerability. You will be responsible for identifying exactly which products and versions are impacted and what specific data or services are at riskProactive Defense: Translate offensive research into preventative measures, providing Engineering teams with the technical evidence and architectural guidance needed to implement robust, long-term mitigationsAI-Enhanced Security Engineering: Explore and implement AI-driven automation to enhance our discovery and analysis capabilities. You will use emerging technologies to scale the identification of complex vulnerability patterns across the Nutanix stackTechnical Advocacy: Serve as a senior technical subject matter expert during high-stakes triage, helping stakeholders understand the practical reality of threat through evidence-based technical analysis and exploit modelingSkills6-9 years of experience in Product Security Engineering, Vulnerability Research, or Offensive Security, with a focus on deconstructing complex software systemsA talent for 'Attack Path Thinking', you can look at a complex architecture and identify how a minor logic flaw could lead to a major compromiseA strong understanding of software vulnerabilities (logic flaws, memory corruption, auth bypasses) and how they manifest in cloud-native and hybrid-cloud environmentsExperience or a strong interest in using AI-driven tools to scale security engineering and automate the discovery of sophisticated vulnerability patternsAn ability to work as peer with Architects and Developers, using technical data and research to build consensus on remediation pathsExperience with reverse engineering or high-level exploit development in a research-focused environmentFamiliarity with 'Graph-based' security analysis (mapping relationships between assets, permissions, and vulnerabilities)Contributions to the security community, such as tool development, technical whitepapers, or responsibility disclosed CVEsExperience in a distributed engineering environment where technical evidence is the primary driver of security prioritizationCompany OverviewMastech Digital provides IT associates in digital and mainstream technologies, Digital Transformation Services around Salesforce.com and SAP It was founded in 1986, and is headquartered in Pittsburgh, Pennsylvania, USA, with a workforce of 1001-5000 employees. Its website is http://www.mastechdigital.com/.Company H1B SponsorshipMastech Digital has a track record of offering H1B sponsorships, with 50 in 2026, 399 in 2025, 496 in 2024, 540 in 2023, 947 in 2022, 681 in 2021, 751 in 2020. Please note that this does not guarantee sponsorship for this specific role.