Security Engineer Exposure and Vulnerability Management

Skills

About the Role

You will manage exposure and vulnerabilities across cloud, Kubernetes, endpoints, networks, and bare-metal systems. You will build inventory, scanning, prioritization, and remediation automation; remediate vulnerabilities directly; manage external findings; and report exposure accurately.

Requirements

• Build vulnerability-management pipelines, automation, and integrations.
• Write production-quality automation in Python or a similar language.
• Connect scanners, asset systems, and ticketing systems.
• Prioritize findings using KEV, EPSS, reachability, and judgment.
• Remediate vulnerabilities in codebases and infrastructure.
• Drive remediation at scale through other teams.
• Manage vulnerability and exposure coverage for corporate endpoints and third-party software.

Responsibilities

• Manage exposure and vulnerability management across external attack surfaces, cloud, Kubernetes, endpoints, networks, and bare-metal systems.
• Assess patch posture, software, and baseline drift across macOS, Windows, and Linux systems.
• Identify and remediate unmanaged applications, SaaS, endpoint packages, and browser and IDE extensions.
• Build asset inventory, scanner orchestration, deduplication, and risk prioritization.
• Integrate remediation into ticketing and delivery workflows and verify closure automatically.
• Remediate vulnerabilities through code, infrastructure, image, and configuration changes.
• Assess firmware, BMCs, GPU drivers, host images, and data-center equipment.
• Manage pen-test findings and external reports and report exposure.

Benefits

• Equity for full-time roles