Vulnerability Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Take ownership of initial CVSS scoring and exploitability evaluations for vulnerability risk assessments.

• Reproduce and validate findings reported by customers and penetration tests prior to escalation to the Engineering team.

• Oversee SAST/DAST and vulnerability-scanning automation, resolve failures, and fine-tune configurations.

• Create or execute proof-of-concept exploits for chosen CVEs.

• Collaborate with Engineering to prioritize and implement vulnerability fixes.

• Assist the Staff Security Engineer by managing the daily workload related to vulnerability management.

⛳️ Requirements

• Practical experience in managing vulnerabilities for a large SaaS product covering OS, container, and dependency exposure.

• Proficient in triaging and tracking CVEs for a SaaS or containerized product.

• Proven track record of reproducing and validating vulnerabilities reported by customers or identified in penetration tests.

• Familiarity with vulnerability-scanning tools such as Prisma Cloud/Twistlock, JFrog, or Trivy.

• Capability to build or maintain SAST/DAST pipeline automation.

• Experience collaborating with Engineering to prioritize and deliver fixes.

• Background in a highly regulated environment or a contemporary software company.

• Strong scripting skills, preferably in Python.

• Working knowledge of CVSS v3.1/v4.0 scoring.

• Skills in exploit development or proof-of-concept creation, including tools like Burp Suite.

• Understanding of OWASP Top 10 and related testing methodologies.

• Familiarity with containers, Kubernetes, Linux, AWS, and basic networking principles.

• Knowledge of authentication/authorization and API security fundamentals.

• Basic ability in threat modeling.

• Excellent communication skills with the ability to draft risk statements for non-technical audiences.

• Ability to work effectively in ambiguous situations.

• OSWA, OSWE, or similar offensive-security certification is a plus.

• Familiarity with Airflow and Snowflake is a plus.

🏝️ Benefits

• A teaching and learning environment equipped with the necessary tools for success.

• A diverse and inclusive workplace.

• A growth-oriented mindset with opportunities for personal and professional improvement.