Senior Security Engineer, Vulnerability Management

What you'll do

• Manage the full vulnerability lifecycle from detection and impact assessment to remediation and verification.
• Build tools, services, and workflows using AI and automation to scale security processes.
• Implement a "PRs, not tickets" approach to automate finding enrichment and fix delivery.
• Analyze recurring vulnerabilities to identify root causes and prevent issues earlier in the SDLC.
• Partner with engineering and product teams to balance technical constraints with business risk.
• Provide subject matter expertise for vulnerability management controls across multiple compliance frameworks.
• Reproduce and validate externally reported vulnerabilities in cloud-native and multi-cloud environments.

What we're looking for

• You have experience identifying, prioritizing, and driving remediation of vulnerabilities in large software, cloud, or infrastructure environments.
• You can independently solve complex technical problems using one or more programming languages such as Go, Python, or Java.
• You have experience with cloud-native or multi-cloud environments, containers, orchestration platforms, infrastructure as code, and modern software-delivery workflows.
• You have experience reproducing and validating externally reported vulnerabilities.
• You use data, exploitability, exposure, technical context, and business impact to make and explain risk decisions.
• You use AI-assisted tools thoughtfully, validate their output, and can explain the reasoning behind your decisions.
• You have a BS/MS/PhD in Computer Science, Engineering, or a related scientific field, or equivalent practical experience.
• You must be eligible for any required authorizations from the US government to conform to export control regulations.