Security Engineer (Vulnerability Management)

What you'll do

• Conduct software code reviews to identify insecure patterns and assist teams in remediation.
• Perform web application security testing using established frameworks and tools.
• Triage and validate Bugcrowd reports while coordinating with researchers and internal teams on disclosure.
• Execute Purple Team exercises to test controls, improve detection, and close security gaps.
• Contribute to Red Team operations including scoping, execution support, and post-exercise analysis.
• Develop internal security tools, automation pipelines, and processes to simplify security adoption.
• Build and operate communication workflows to provide timely alerts on emerging threats.
• Conduct continuous threat assessments by integrating threat intelligence into scanning and prioritization.

What we're looking for

• Bachelor's degree in computer science or another STEM discipline, or 2+ years of professional experience in security software development.
• Experience with Python, Go, C#, C/C++, or Rust programming languages.
• Experience designing and implementing security solutions for operating systems, distributed systems, or large-scale infrastructure.
• Experience identifying, assessing, and remediating vulnerabilities across applications, infrastructure, or cloud (preferred).
• Scripting and automation experience with the ability to develop internal tools (preferred).
• Strong understanding of networking fundamentals and how they relate to vulnerability exposure (preferred).
• Relevant certifications such as OSCP, GSEC, or equivalent demonstrated experience (preferred).
• Must be a U.S. citizen, national, lawful permanent resident, or eligible for required export control authorizations.