Senior Engineer, Exposure & Vulnerability Management

Remote Opportunity - United States; This is a remote position based in the United States.Full-TimeSenior

SalaryEstimated annual base salary range is: $134,200–$180,600. In addition to base salary, this role is eligible for an annual bonus, equity compensation

Apply NowOpens the employer's application page

More jobs in this role

Job Details

Experience: 7+ years of experience in vulnerability management, exposure management, or related information security domains
Required Skills: PythonJavaGo

Requirements

Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
7+ years of experience in vulnerability management, exposure management, or related information security domains.
Experience leading large-scale programs from strategy through execution in cloud-first and hybrid environments.
Deep understanding of security principles and experience turning vulnerability data into prioritized, owned, and verified remediation.
Hands-on experience building or deploying AI/LLM-based agents or multi-agent systems for security or engineering workflows, including orchestration, tool use, and evaluation.
Working knowledge of approval workflows, audit logging, rollback controls for automated remediation, and agent-driven change risks.
Proficiency in one or more programming languages such as Python, Go, or Java, and strong scripting skills for automation and integration.
Expert-level experience with vulnerability and exposure management platforms such as Tenable, Qualys, or Rapid7, and with CTEM, attack surface management, and attack-path analysis tooling.
Strong command of risk-based prioritization, including CVSS, EPSS, CISA KEV, reachability analysis, and threat intelligence feeds.
Experience with AWS, Azure, or GCP; container and Kubernetes security; and Infrastructure-as-Code tools such as Terraform or CloudFormation.
Experience with CI/CD pipelines, SCA/SAST tooling, software supply chain security, SBOMs, and dependency mapping.
Knowledge of UNIX/Linux, macOS, Windows, networking, and database management systems.
Experience with risk management and compliance requirements such as SOC2 or GxP.
CISSP, OSCP, GWAPT, or other relevant security certifications are highly desirable.

Responsibilities

Design and deploy multi-agent systems that take exposures from discovery through analysis, remediation, and validation.
Build approval gates, audit trails, and rollback controls into automated remediation.
Develop prioritization engines using reachability, attack-path context, business criticality, and live exploit intelligence.
Automate verification to distinguish theoretical flaws from actively exploitable conditions.
Drive the Continuous Threat Exposure Management strategy across products, platforms, infrastructure, and corporate applications.
Assess and revamp the exposure and vulnerability management program to support business outcomes and zero-trust security.
Architect cloud-native discovery, asset-inventory, and remediation workflows integrated with ticketing, CI/CD, and configuration management.
Partner with Engineering and IT to embed secure-by-default practices and risk-based remediation timelines.
Define KPIs, KCIs, and KRIs to measure control effectiveness and guide continuous improvement.
Work with partner teams to design exposure and vulnerability controls that support standards such as SOC2.

View Full Description & ApplyYou'll be redirected to the employer's site