Security Engineer, Vulnerability Management

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Identify, implement, and operationalize scanning tools for production assets.

• Manage the vulnerability lifecycle comprehensively, including triage, severity evaluation, owner designation, remediation SLAs, and reporting.

• Develop engineering-centric triage and remediation processes.

• Automate the routing and follow-up of vulnerability findings.

• Create a remediation dashboard utilized by both engineering teams and leadership.

• Streamline the collection of vulnerability management evidence for compliance initiatives in collaboration with the Compliance team.

• Develop automation solutions, including agentic tools, to minimize manual security operations and foster engineering expansion.

• Oversee the entire vulnerability management and security operations program.

⛳️ Requirements

• Over 5 years of experience in security engineering, security operations, or software engineering, with a substantial focus on security.

• Practical experience in establishing or managing a vulnerability management program or software security tools (SCA, container, cloud, or host scanning).

• An engineering-oriented approach to triage and remediation.

• Ability to accurately determine the true severity of a finding in its context, using CVSS as one metric.

• Proficient scripting and automation capabilities in Go or Python.

• Familiarity with infrastructure-as-code concepts, such as Terraform.

• A pragmatic perspective on risk and the ability to articulate business implications and the urgency of remediation.

• Experience with real-time media, networking, or WebRTC systems is a plus.

• Background in supporting HIPAA, PCI-DSS, ISO 27001, or SOC 2 compliance audits is advantageous.

• Experience in incident response or application security is beneficial.

• Knowledge of AI security is a plus.

🏝️ Benefits

• Competitive salary.

• Equity package.

• Health, dental, and vision benefits.

• Flexible vacation policy.

• Opportunity to contribute to open source alongside world-class engineers.