Senior Engineer, Exposure & Vulnerability Management
New
J
JobgetherCybersecurity
Based in the United StatesFull-TimeSenior
SalaryBase salary: $134,200–$180,600 USD annually
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 7 years of experience in vulnerability management, exposure management, or related information security domains.
- Required Skills
- PythonJavaGo
Requirements
- Have a bachelor's or master's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
- Have at least 7 years of experience in vulnerability management, exposure management, or related information security domains.
- Have experience leading large-scale security programs from strategy through execution in cloud-first and hybrid environments.
- Translate vulnerability data into prioritized, assigned, and verified remediation actions.
- Have hands-on experience building or deploying AI/LLM-based agents or multi-agent systems for security or engineering workflows, including orchestration, tool usage, and evaluation.
- Understand approval workflows, audit logging, and rollback controls for automated remediation.
- Be proficient in one or more programming languages, such as Python, Go, or Java, with strong scripting and automation capabilities.
- Have advanced experience with vulnerability and exposure management platforms such as Tenable, Qualys, or Rapid7, or equivalent solutions.
- Know CTEM, attack surface management, attack-path analysis, and risk-based prioritization frameworks and intelligence sources, including CVSS, EPSS, CISA KEV, reachability analysis, and threat intelligence feeds.
- Have experience with AWS, Azure, or GCP; container and Kubernetes security; and Infrastructure-as-Code tools such as Terraform or CloudFormation.
- Have experience with CI/CD pipelines, SCA/SAST tools, and software supply chain security practices, including SBOMs and dependency mapping.
- Understand UNIX/Linux, macOS, and Windows operating systems, networking, and database management systems.
- Have experience with security risk management and aligning technical solutions with organizational risk tolerance and compliance requirements such as SOC 2 or GxP.
- Preferred: security certifications such as CISSP, OSCP, or GWAPT.
- Preferred: experience designing continuous exposure management programs in complex enterprise environments or familiarity with regulated technology or life sciences environments.
Responsibilities
- Design and deploy AI-powered multi-agent systems to manage exposures from discovery through verified remediation.
- Build automated workflows to analyze vulnerabilities, map internal dependencies, generate patches or Infrastructure-as-Code updates, and validate remediation.
- Implement approval gates, audit trails, and rollback mechanisms for automated changes.
- Develop risk-based prioritization engines using reachability, attack-path context, business criticality, and exploit intelligence.
- Implement automated verification to distinguish theoretical vulnerabilities from actively exploitable conditions.
- Drive the Continuous Threat Exposure Management strategy and continuous security monitoring across products, platforms, infrastructure, and corporate applications.
- Architect cloud-native discovery, asset inventory, and remediation workflows integrated with ticketing systems, CI/CD pipelines, and configuration management tools.
- Partner with Engineering and IT to embed secure-by-default practices into development, deployment, and patching.
- Define remediation timelines and monitor security KPIs, KCIs, and KRIs.
- Maintain vulnerability and exposure controls supporting regulatory and compliance requirements, including SOC 2.
View Full Description & ApplyYou'll be redirected to the employer's site
