Security Engineer - Vulnerability Management
Core
Build and improve AI pipelines for automated vulnerability validation, reachability analysis, and exploit generation to advance a proprietary vulnerability database.
Role type
Senior IC security engineer (vulnerability management & AI pipelines)
Builds
Production-grade automated vulnerability discovery systems and an enriched vulnerability database
Domain
Cybersecurity, Vulnerability Management, AI/ML
Deliverable
production ML models
Required skills
Vulnerability research and triage, CVE/CWE/CVSS/EPSS/PURL/NVD/OSV/VEX standards, AI/LLM pipeline design and evaluation, Code analysis (Python, JS/TS, Java, Go), Security communications (blogs/advisories)
Preferred skills
Exploit development, Fuzzing, Static analysis, SAST/SCA/DAST triage, Supply chain security (SLSA/SSDF), Open source contributions
Technologies
LLM frameworks, Agent frameworks, CI/CD automation, SAST/SCA/DAST tools, CVE/CWE/CVSS/EPSS/PURL/NVD/OSV/VEX standards
Responsibilities
Monitor and manage pipelines that triage, enrich, and prioritize vulnerabilities at scale; Investigate high-impact vulnerabilities and the vulnerability landscape; Author external-facing security content (blogs, advisories, reports); Collaborate with 0-day researchers to scale automated discovery; Feed findings into detection and analysis pipelines
Seniority
Senior, hands-on IC
