← Back to Search Results 🚩 Report Job Ad 🗑️ Request Removal

Full-time ⏳ Short term (< 6 months)

Posted by: H @hpe_ATS

Hewlett Packard Enterprise

Hewlett Packard Enterprise is a technology company headquartered in United States. Careers hosted on Workday (seed data).

Location 📍 Spring, Texas, United States of America

Timezone 🕒

Posted Date 📅 2026-10-30 03:44

Views 👁️ 5 views

Principal Product Security Response Engineer - AI and Automation This role has been designed as 'Hybrid' with a requirement that you will work on average 2 days per week from an HPE office. Who We Are: Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today’s complex world. Our culture thrives on finding new and better ways to accelerate what’s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE. Job Description: Job Family Definition: This is a hands-on technical engineering role focused on product security vulnerability investigations, CVE coordination, coordinated vulnerability disclosure, and AI-driven security automation. Management Level Definition: The ideal candidate brings a strong understanding of the CVE ecosystem, CVE Numbering Authority (CNA) processes, and Product Security Incident Response Team (PSIRT) operations, combined with software engineering and automation capabilities. As AI-powered vulnerability discovery technologies increase the volume and complexity of security findings, you will help HPE scale its product security response processes through intelligent automation, workflow integration, and AI-assisted vulnerability analysis. You will collaborate closely with product engineering teams, security researchers, vulnerability response teams, and technical leaders to ensure vulnerabilities are accurately investigated, documented, remediated, and communicated to customers. Responsibilities: Product Security Response & Vulnerability Coordination • Lead technical investigations of reported product security vulnerabilities, from initial intake through remediation coordination and disclosure readiness. • Evaluate vulnerability impact, exploitability, affected product versions, and technical severity. • Work with product engineering teams to validate security findings, reproduce vulnerabilities when needed, and coordinate remediation activities. • Support CVE Numbering Authority (CNA) processes, including CVE reservation, assignment, registration, and vulnerability record management. • Coordinate vulnerability disclosures in alignment with CVE Program requirements and established industry practices. • Develop, review, and coordinate customer-facing security advisories and vulnerability bulletins. • Collaborate with internal security response teams, external security researchers, and product stakeholders to ensure accurate and timely vulnerability communication. AI-Enabled Security Automation • Design and implement automation to improve the scalability and efficiency of product vulnerability response operations. • Develop AI-assisted workflows that process vulnerability findings from engineering defect-tracking systems, security testing platforms, and internal reporting channels. • Build integrations with Jira and other engineering systems to extract, organize, and validate vulnerability information. • Apply approved LLMs, GenAI capabilities, and automation frameworks to support vulnerability triage, case analysis, knowledge retrieval, and security advisory drafting. • Design human-in-the-loop validation processes to ensure AI-generated security information is technically accurate and reviewed before publication. • Develop reusable Python scripts, APIs, services, and automation tools that reduce manual case management and repetitive administrative work. • Evaluate emerging AI and security technologies that can improve vulnerability response quality, consistency, and operational efficiency. Security Engineering & Technical Leadership • Serve as a technical resource for complex product security vulnerabilities and security response investigations. • Build and maintain security validation tools, proof-of-concept scripts, and test harnesses when needed to support vulnerability analysis. • Collaborate with product security engineers, software developers, cloud engineering teams, and security researchers. • Help improve security response processes, technical documentation, and operational workflows. • Provide technical guidance and mentoring to engineers across product security and development teams. • Contribute to the continuous improvement of HPE's enterprise product security response capabilities. Required Qualifications • Bachelor's or Master's degree in Computer Science, Information Systems, or equivalent. • Typically, 10+ years' experience. Preferred Qualifications • Direct experience working within or closely supporting a Product Security Incident Response Team (PSIRT/PSRT). • Experience working for a CVE Numbering Authority or participating directly in CVE assignment and publication workflows. • Experience developing or integrating AI/LLM-enabled tools, GenAI workflows, or agentic automation systems. • Experience automating vulnerability intake, triage, case management, reporting, or security advisory generation. • Experience with security automation, Python-based tooling, REST APIs, and enterprise workflow integrations. • Familiarity with cloud and SaaS security environments, including AWS, Azure, or Google Cloud. • Experience with enterprise infrastructure, networking, storage, operating systems, or related technology products. • Knowledge of security testing, penetration testing, vulnerability research, or proof-of-concept development. • Familiarity with MITRE CWE, NVD, FIRST, and vulnerability disclosure standards. • Experience collaborating with globally distributed product engineering and security response teams. Accessibility HPE is committed to creating an inclusive and accessible workplace and encourages applications from all qualified individuals, including those with disabilities. If you believe you require accommodation during any stage of the application or interview process, please submit your request by completing our secure form linked here. Note: This option is reserved for applicants needing assistance/reasonable accommodation related to a disability. What We Can Offer You: Health & Wellbeing We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing. Personal & Professional Development We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division. Unconditional Inclusion We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. Let's Stay Connected: Follow @HPECareers on Instagram to see the latest on people, culture and tech at HPE. Job: Engineering Job Level: TCP_05 "The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. – United States of America: Annual Salary USD 157,000 - 361,000 in Texas The listed salary range reflects base salary. Variable incentives may also be offered." Information about employee benefits offered in the US can be found at https://myhperewards.com/main/new-hire-enrollment.html HPE is an Equal Employment Opportunity/ Veterans/Disabled/LGBT employer. We do not discriminate on the basis of race, gender, or any other protected category, and all decisions we make are made on the basis of qualifications, merit, and business need. Our goal is to be one global team that is representative of our customers, in an inclusive environment where we can continue to innovate and grow together. Please click here: Equal Employment Opportunity. Hewlett Packard Enterprise is EEO Protected Veteran/ Individual with Disabilities. HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories. Recruitment Fraud Alert We have become aware of an increase in fraudulent recruitment activities in which individuals impersonate our company or authorized recruitment agencies to offer fake employment opportunities. These scams may occur through false websites, emails, social media, or chat-based applications and often aim to obtain personal information or money. Please note that Hewlett Packard Enterprise (HPE), its direct and indirect subsidiaries and affiliated companies, and its authorized recruitment agencies/vendors will never charge a candidate a registration fee, hiring fee, or any other fee in connection with its recruitment and hiring process. We also never request personal information such as back account details, Social Security numbers, or national IDs via social media or chat applications. All legitimate job opportunities will come through official company channels, and candidates are responsible for verifying the credentials of any third party claiming to represent the company. Any reliance on fraudulent communication is at the individual’s own risk, and HPE disclaims legal liability for any resulting damages. If you suspect recruitment fraud, do not share personal information or make any payments and report the incident to your local authorities immediately. — This position is managed in the company's applicant tracking system (Req. ID 1217976). Use the "Apply External" button to apply on the company career site.

# 1217976 # ATS import

View Company Page ↗

👥 Company Team Roster

Posted by @hpe_ATS

Register to Apply 🔄 Synced from company career site