
Lead Engineer, Vulnerability and Exposure Management
Posted Aug 27

Posted Aug 27
This is a fully remote position, open to applicants in Brazil.
β’ Design and develop engineering solutions for scan coverage, data ingestion and normalization, prioritization logic, ticketing, and reporting pipelines.
β’ Create automation using Python, SQL, and REST APIs for prioritization, SLA logic, exception handling, and validation processes.
β’ Participate in the design of the CTEM operating model led by the Global Lead; implement and enhance this model.
β’ Assist in the sustainability model through the creation of pipeline runbooks, data quality assessments, and service ownership mapping.
β’ Take ownership of engineering implementations independently while collaborating with cloud, endpoint, application, and remediation teams.
β’ Possession of CrowdStrike CCFA, Tenable VM Specialist, Qualys VMDR, GIAC GSEC/GMON, or a relevant cloud security certification.
β’ A minimum of 5 years of experience in vulnerability management or security engineering.
β’ Practical experience in engineering vulnerability or exposure tools such as Tenable, Qualys, Rapid7, CrowdStrike FEM, or Defender.
β’ Proficiency in scan coverage, authenticated scanning, and data normalization techniques.
β’ Experience in building automation and integrations utilizing Python, SQL, and REST APIs.
β’ Familiarity with integrating vulnerability management, ticketing systems (such as ServiceNow/Jira), and cloud or endpoint data sources.
β’ Ability to apply risk-based prioritization methods beyond CVSS, leveraging EPSS, CISA KEV, threat intelligence, and asset context.
β’ Experience in attack surface management, cloud security posture, or exposure related to containers/Kubernetes is advantageous.
β’ Knowledge of patch and remediation orchestration tools like BigFix, SCCM/MECM, or Red Hat Satellite is a plus.
β’ A culture focused on continuous improvement.
β’ Opportunities for career development and internal promotions.
β’ An inclusive environment that fosters a sense of belonging.
LMI
Sourcegraph
Verra Mobility
Cint
Get handpicked remote jobs straight to your inbox weekly.