Lead Engineer, Vulnerability & Exposure Management

This is a fully remote position, open to applicants in Poland.

📋 Description

• Engineer the coverage for scans, manage data ingestion and normalization, establish prioritization logic, handle ticketing, and develop reporting pipelines.

• Create automation solutions utilizing Python, SQL, and APIs to facilitate prioritization, service level agreement (SLA) logic, exception processes, and validation tasks.

• Contribute to the design of the CTEM operating model, which is overseen by the Global Lead, and participate in its implementation and refinement.

• Assist in the sustainability model by developing pipeline runbooks, performing data-quality checks, and mapping service ownership.

• Independently manage engineering implementations and ensure integration with cloud, endpoint, application, and remediation teams.

⛳️ Requirements

• Possession of CrowdStrike CCFA, Tenable VM Specialist, Qualys VMDR, GIAC GSEC/GMON, or a cloud security certification.

• Over 5 years of experience in vulnerability management or security engineering.

• Practical experience in engineering vulnerability and exposure tools (such as Tenable, Qualys, Rapid7, CrowdStrike FEM, or Defender), including scan coverage, authenticated scanning, and data normalization.

• Proficiency in developing automation and integrations (using Python, SQL, and REST APIs) across vulnerability management, ticketing systems (e.g., ServiceNow/Jira), and cloud or endpoint data sources.

• Experience in applying risk-based prioritization methods that extend beyond CVSS, utilizing threat intelligence sources like EPSS and CISA KEV, as well as considering asset context.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and continuous learning.

• Flexible work hours and remote work options.

• Supportive and collaborative team environment.