Senior Security Engineer, Vulnerability Management

Responsibilities

• Manage vulnerabilities from detection and impact assessment through risk-based prioritization, remediation, and verification.
• Build AI-assisted automation, tools, services, and workflows to scale the vulnerability lifecycle.
• Automate finding enrichment, ownership identification, fix recommendations or delivery, and outcome tracking through a “PRs, not tickets” approach.
• Analyze recurring vulnerabilities and remediation failures to identify root causes and prevention opportunities earlier in the software development lifecycle.
• Partner with security, product, platform, compliance, and engineering teams to implement scalable risk-reduction solutions.
• Provide evidence and subject matter expertise for vulnerability management processes and controls across SOC2, HIPAA, PCI, FedRAMP, and ISO frameworks.

Requirements

• Experience identifying, prioritizing, and driving remediation of vulnerabilities in large software, cloud, or infrastructure environments.
• Ability to independently solve complex technical problems using one or more programming languages such as Go, Python, or Java.
• Experience with cloud-native or multi-cloud environments, containers or orchestration platforms, infrastructure as code, and modern software-delivery workflows.
• Experience reproducing and validating externally reported vulnerabilities.
• Ability to make risk decisions using exploitability, exposure, technical context, data, and business impact.
• Ability to work through ambiguity, test assumptions, document tradeoffs, and adjust solutions as information changes.
• Thoughtful use of AI-assisted tools with the ability to validate and explain their output.
• Ability to influence security, engineering, product, and compliance teams through clear communication and technical credibility.
• BS, MS, or PhD in Computer Science, Engineering, or a related scientific field, or equivalent practical experience.
• Candidates must be eligible for any required US government authorizations under export control regulations.

Benefits

• Hybrid workplace with flexibility intended to support work-life harmony.
• New hire stock equity through RSUs and an employee stock purchase plan.
• Continuous professional development, product training, and career pathing.
• Intradepartmental mentor and buddy program.
• Inclusive company culture, Community Guilds, and access to Inclusion Talks.
• Global mental health benefits for employees and dependents age 6+.
• Competitive global benefits that may vary by country and employment type.