AppSec Jobs

Red Hat Security Team

Open security roles at Red Hat, and what we know about the team behind them.

information technology & services · 26000 employees · 6 open roles. Updated October 15, 2026.

Open roles (6)

Red Hat

Product Security Developer - Compliance Engineering (Brno Office or Waterford Office)

Security Intel
Waterford, Waterford, Irelandinformation technology & servicesPosted Date unknownVerified 3d ago

“Red Hat's Application Security philosophy is rooted in a DevSecOps approach where security is viewed as a continuous...”

Stack- SCA- Cloud Security- Code Assistant/GenAI
View Job

Red Hat

Senior Product Security Engineer - Incident Response (EMEA)

Security Intel
Czechiainformation technology & servicesPosted Date unknownVerified 3d ago

“Red Hat's Application Security philosophy is rooted in a DevSecOps approach where security is viewed as a continuous...”

Stack- SCA- Cloud Security- Code Assistant/GenAI
View Job

Red Hat

Senior Product Security Engineer (EMEA)

Security Intel
Dublin, County Dublin, Irelandinformation technology & servicesPosted Date unknownVerified 3d ago

“Red Hat's Application Security philosophy is rooted in a DevSecOps approach where security is viewed as a continuous...”

Stack- SCA- Cloud Security- Code Assistant/GenAI
View Job

Red Hat

Senior Product Security Portfolio and Delivery Incident Commander

Security Intel
Raleigh, North Carolina, United Statesinformation technology & servicesPosted Date unknownVerified 3d ago

“Red Hat's Application Security philosophy is rooted in a DevSecOps approach where security is viewed as a continuous...”

Stack- SCA- Cloud Security- Code Assistant/GenAI
View Job

Red Hat

Product Security Engineer (GRC)

Security Intel
Pune, Maharashtra, Indiainformation technology & servicesPosted Date unknownVerified 3d ago

“Red Hat's Application Security philosophy is rooted in a DevSecOps approach where security is viewed as a continuous...”

Stack- SCA- Cloud Security- Code Assistant/GenAI
View Job

Red Hat

Software Engineer - Product Security Development Team (Brno Office, Czech Republic)

Security Intel
Brno, South Moravian Region, Czech Republicinformation technology & servicesPosted Date unknownVerified 3d ago

“Red Hat's Application Security philosophy is rooted in a DevSecOps approach where security is viewed as a continuous...”

Stack- SCA- Cloud Security- Code Assistant/GenAI
View Job

Security at Red Hat

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

  • Red Hat's Application Security philosophy is rooted in a DevSecOps approach where security is viewed as a continuous process rather than a final step.
  • They emphasize 'shifting left' by providing developers with tools like SAST directly within their IDEs to enable early detection.
  • Their risk philosophy involves prioritizing weaknesses on a standardized scale (Low to Critical) similar to how vulnerabilities are handled. - **Stated AppSec Mission**: "Security isn't an afterthought.
  • It's continuous"– Red Hat DevSecOps approach (https://www.redhat.com/en/solutions/devsecops-approach). - **Developer Enablement**: "encourage developers to 'shift-left' by integrating the SAST tool into their chosen Integrated Development Environment (IDEs)"– Red Hat SAST guidance (https://www.redhat.com/en/blog/leading-effective-static-application-security-testing-sast-program). - **Risk Philosophy**: "prioritizing them on a scale similar to vulnerabilities: Low, Medium, High, Critical"– Red Hat blog (https://www.redhat.com/en/blog/repair-bridge-it-cracks-understanding-vulnerabilities-and-weaknesses-modern-it).

What they're working on

  • Red Hat's active initiatives focus on automating security testing within CI/CD pipelines and maintaining a rigorous vulnerability management process.
  • A significant recent focus has been the promotion and integration of RapiDAST for continuous dynamic testing. - **Shift Left in Practice**: "integrate the tool into your CI/CD pipelines"– Red Hat SAST guidance (https://www.redhat.com/en/blog/leading-effective-static-application-security-testing-sast-program). - **Vulnerability Management**: "prioritizing them on a scale similar to vulnerabilities: Low, Medium, High, Critical"– Red Hat blog (https://www.redhat.com/en/blog/repair-bridge-it-cracks-understanding-vulnerabilities-and-weaknesses-modern-it). - **Recent Initiatives**: "perform tests before every release and continuously"using RapiDAST – (https://developers.redhat.com/articles/2025/06/19/automate-dynamic-application-security-testing-rapidast).