Vulnerability Management Engineer
New
B
BackblazeCloud storage
Remote - Colombia ; Remote - Costa Rica ; Remote - MexicoFull-Time
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- Scripting
Requirements
- Experience with enterprise vulnerability or exposure management.
- Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies.
- Experience interpreting vulnerability intelligence and assessing practical exploitability.
- Knowledge of risk-based prioritization techniques including CVSS, exploit prediction, known-exploitation intelligence, and environmental context.
- Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, endpoint, or related security data.
- Experience with scripting, automation, or data analysis.
- Strong understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE.
- Familiarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation is preferred.
- Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, MITRE ATLAS, and MAESTRO.
Responsibilities
- Correlate threat intelligence and vulnerability findings with asset inventory, software and system configuration, application testing, network exposure, ownership, and business criticality.
- Assess exploitability and reachability rather than relying on vulnerability severity alone.
- Incorporate exploit prediction, known exploitation, open-source threat intelligence, adversary activity, and environmental context into prioritization.
- Determine whether exposure requires immediate incident response or remediation under established operational objectives.
- Use AI-assisted workflows to ingest and correlate vulnerability intelligence against the organization's actual technology configuration, and independently validate conclusions.
- Partner with Red Team to validate practical exploitability of significant vulnerabilities.
- Identify compensating controls such as configuration changes, access restrictions, segmentation, or filtering when immediate patching is impractical.
- Automate vulnerability ingestion, analysis, prioritization, remediation tracking, mitigation, and verification where appropriate.
View Full Description & ApplyYou'll be redirected to the employer's site
