Security Vulnerability Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Identify, evaluate, and prioritize vulnerabilities across enterprise systems.

• Create and refine detection logic and analytics that align with established performance and coverage criteria.

• Design, develop, and implement detection and enrichment systems that analyze unstructured security telemetry, logs, and threat intelligence data.

• Lead security engineering initiatives that focus on detection, vulnerability analytics, and emerging defensive technologies.

• Configure data pipelines and processes for telemetry ingestion.

• Implement predictive components that analyze over five years of historical incident and vulnerability data to generate time- and location-based risk forecasts.

• Integrate detection and vulnerability management solutions with current SIEM, ticketing, and operational systems.

• Collaborate with cross-functional teams, including work within the STRIDE platform.

• Validate data integrity, detection performance, and system reliability across security tools.

• Assess detection and forecast accuracy, ensuring outputs are operationally relevant for command staff and field leadership.

• Monitor, evaluate, and continually enhance detection and vulnerability analytics performance.

• Optimize systems for scalability, efficiency, and low false-positive rates in cloud environments.

• Utilize SIEM, vulnerability scanners, AWS security services, TensorFlow, PyTorch, and custom frameworks.

• Evaluate model and detection risks, biases, and coverage gaps in line with responsible use guidelines and regulatory standards.

• Implement DetOps/MLOps practices to automate the deployment, monitoring, and lifecycle management of detections, analytics, and models.

⛳️ Requirements

• At least 5 years of experience in security engineering, vulnerability management, or detection engineering, encompassing design, evaluation, and deployment.

• U.S. citizenship is mandatory.

• Must be willing to undergo a U.S. Government background investigation.

• Practical experience with security analytics and detection frameworks.

• Proficiency in scripting/automation using Python.

• Familiarity with major cloud platforms.

• Knowledge of PyTorch, TensorFlow, Keras, Hugging Face, LangChain, and API-driven tools for analytics is a significant advantage.

• Experience with large-scale data stores, search/vector databases (Pinecone, Weaviate, Qdrant, Chroma), and retrieval-based analysis architectures for security applications.

• Advanced skills in query and detection engineering, model/detection tuning, and hands-on experience with analytics and automation tools.

• Experience in detection and model evaluation, monitoring, validation, benchmarking, and deployment.

🏝️ Benefits

• Competitive salary, paid bi-monthly.

• Comprehensive medical coverage.

• 100% of medical premiums covered by True Zero.

• Company-wide new business incentive programs.

• Contribution incentives (e.g., white papers, blog posts, internal webinars, etc.).

• 3 weeks of PTO plus 11 paid holidays annually.

• 401k program with 100% company match on the first 4%.

• Monthly reimbursement for cell phone and home internet expenses.

• Paternity/maternity leave.

• Investment in training and certifications to enhance and expand your technical skills.