Security Engineer
Core
Build and operate production engineering for vulnerability management across external attack surfaces, cloud, Kubernetes, endpoints, and infrastructure.
Role type
Senior IC security engineer (vulnerability management)
Builds
Production automation for asset inventory, scanner orchestration, finding deduplication, prioritization, and remediation workflows
Domain
Cybersecurity, Cloud Infrastructure, Endpoint Security
Required skills
Python, vulnerability management engineering, KEV/EPSS prioritization, infrastructure-as-code, patch management, cross-team remediation leadership, firmware assessment, GPU stack security
Preferred skills
External attack surface management, BMC security, CSPM/KSPM, exploit development, endpoint management tools, supply-chain risk
Technologies
Kubernetes, Python, Infrastructure-as-Code, SaaS, macOS, Windows, Linux
Responsibilities
Own exposure and vulnerability management across external attack surface, cloud, Kubernetes, corporate endpoints, network infrastructure, bare metal, firmware, GPU drivers, host images, and data center equipment. Build production engineering for asset inventory, scanner orchestration, finding deduplication, prioritization, remediation workflows, and automated closure verification. Remediate vulnerabilities directly by writing patch pull requests, hardening base images, fixing infrastructure-as-code modules, and shipping configuration changes. Run intake for penetration-testing findings and external reports and provide accurate exposure reporting.
Seniority
Senior, hands-on IC
