Vulnerability Engineer
Core
Vulnerability Engineer responsible for finding, triaging, and closing risk across OS, container, and dependency surfaces to provide defensible security assessments.
Role type
Senior IC vulnerability engineer
Builds
Vulnerability management pipelines and risk assessments for a regulated AI platform
Domain
Cybersecurity / Vulnerability Management / SaaS
Required skills
CVE triage and tracking, vulnerability reproduction and validation, SAST/DAST pipeline automation, exploit development and PoC creation, CVSS scoring, container and Kubernetes management, Linux and AWS fundamentals, API security, threat modeling, Python scripting
Preferred skills
Offensive security certifications (OSWA, OSWE, GWAPT, GPEN), Airflow, Snowflake
Technologies
Prisma Cloud, Twistlock, JFrog, Trivy, Burp Suite, Kubernetes, AWS, Linux
Responsibilities
Perform first-pass CVSS scoring and exploitability analysis; reproduce and confirm customer-reported and pen-test findings; maintain SAST/DAST and vulnerability scanning automations; partner with Engineering to prioritize and ship fixes; draft risk statements for non-technical audiences
Seniority
Senior, hands-on IC
