Senior Vulnerability Management Engineer
Core
Senior Vulnerability Management Engineer bridging offensive security and engineering to translate penetration test results into actionable remediation guidance and drive closure of findings.
Role type
Senior IC security engineer (vulnerability management & remediation)
Builds
Secure fixes and systemic improvements for application and platform teams
Domain
Financial markets infrastructure / Application Security
Required skills
Penetration testing (Web Apps, APIs, Infra), Remediation guidance development, Cloud platforms (AWS, Azure, GCP), Containerization (Docker, Kubernetes), OWASP Top 10, Secure coding (Java/.NET/JS/Python), Custom scripting, Root cause analysis, DevSecOps integration
Preferred skills
Threat modelling, Security community engagement, R&D initiatives
Technologies
Burp Suite, Command-line tools, AWS, Azure, GCP, Docker, Kubernetes, Java, Springboot, .NET, JavaScript, Node, Python
Responsibilities
Analyze penetration test reports for technical impact and business risk; Develop and maintain remediation patterns and blueprints; Consult application teams on secure design and code-level fixes; Coordinate remediation activities across teams with risk-based prioritization; Validate fixes via retesting and update finding status; Manage remediation backlog, SLAs, and aging findings; Produce status reports and metrics on risk reduction; Perform root cause analysis for systemic issues; Contribute to automation and standardization of the pentest-to-remediation lifecycle
Seniority
Senior, hands-on IC
