Vulnerability Management Engineer

• Drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies
• Correlate threat intelligence and vulnerability findings with asset inventory, software and system configuration, application testing, network exposure, ownership, and business criticality
• Assess exploitability and reachability rather than relying on vulnerability severity alone
• Incorporate exploit prediction, known exploitation, open-source threat intelligence, adversary activity, and environmental context into prioritization
• Determine whether exposure requires immediate incident response or remediation under established operational objectives
• Use AI-assisted workflows to ingest and correlate vulnerability intelligence against the organization's technology configuration while independently validating conclusions
• Partner with Red Team to validate practical exploitability of significant vulnerabilities
• Identify compensating controls such as configuration changes, access restrictions, segmentation, or filtering when immediate patching is impractical
• Automate vulnerability ingestion, analysis, prioritization, remediation tracking, mitigation, and verification where appropriate

• Experience with enterprise vulnerability or exposure management
• Strong understanding of infrastructure, applications, cloud, containers, networking, and software dependencies
• Experience interpreting vulnerability intelligence and assessing practical exploitability
• Knowledge of risk-based prioritization techniques including CVSS, exploit prediction, known-exploitation intelligence, and environmental context
• Experience correlating vulnerability, asset, configuration, SAST, DAST, SCA, endpoint, or related security data
• Experience with scripting, automation, or data analysis
• Strong understanding of OWASP Top 10, MITRE ATT&CK, MITRE D3FEND, and STRIDE
• Familiarity with OWASP Top 10 for LLM, OWASP Top 10 for Agentic Applications, MITRE ATLAS and MAESTRO
• Familiarity with continuous exposure management, attack-path analysis, AI-assisted analysis, or automated mitigation is preferred

• Equal Opportunity Employer commitment
• Diversity, equity, and inclusion values
• Inclusive workplace where employees can express their true selves and do their best work