Staff Security Engineer, Vulnerability Management

What you'll do

• Architect and scale Risk-Based Vulnerability Management (RBVM) platforms across on-prem, cloud, container, and endpoint environments.
• Build automated remediation workflows to reduce response times for emerging threats across decentralized teams.
• Integrate vulnerability scanning into CI/CD pipelines and development workflows to enforce "Shift-Left" security policies.
• Leverage LLMs and AI agents for automated triage, impact analysis, and generating context-aware remediation instructions.
• Mature vulnerability standards, SLAs, and risk exception processes in partnership with Compliance and IT teams.
• Analyze complex vulnerabilities to determine true risk, identify false positives, and drive informed remediation decisions.
• Develop infrastructure for tracking external attack surface management and software supply chain security.

What we're looking for

• 7+ years of industry experience in software development focused on large-scale security or infrastructure engineering.
• Expertise in building distributed systems and high-availability security platforms using Golang, Java, or Python.
• Proven track record of designing and operating vulnerability management tools at scale.
• Deep understanding of container security, cloud-native infrastructure, and CI/CD pipelines.
• Experience leading cross-functional security initiatives and mentoring senior engineering staff.
• Hands-on experience developing Risk-Based Vulnerability Management (RBVM) frameworks and automated prioritization logic (preferred).
• Knowledge of AI/ML applications in security for vulnerability triage or large-scale data analysis (preferred).
• Experience with External Attack Surface Management (EASM) and Software Supply Chain Security (SSCS) (preferred).