Staff Vulnerability Management Engineer
Core
Lead efforts to discover and remediate vulnerabilities across web applications, APIs, and endpoints by building production-grade automation to uncover coverage gaps and verify closures.
Role type
Staff Vulnerability & Exposure Management Engineer (Individual Contributor)
Builds
Production-grade automation for the vulnerability lifecycle (discovery, scanning, triage, routing, verification)
Domain
Cybersecurity, Cloud Security (SASE), Web Application Security, API Security
Deliverable
production ML models
Required skills
Python, REST APIs, OAuth, token refresh, rate limiting, data parsing, de-duplication, vulnerability exploit mechanics analysis, CWE-level vulnerability analysis, authentication flows, risk-based prioritization (CISA KEV, EPSS)
Preferred skills
AI/ML technologies, advanced orchestration platforms, enterprise security tooling (Tenable, Qualys, CrowdStrike, Wiz, Burp Suite), cloud platforms (AWS, Azure, GCP)
Technologies
Python, REST APIs, OAuth, Tenable, Qualys, CrowdStrike, Wiz, Burp Suite, AWS, Azure, GCP
Responsibilities
Build and operate automation across the entire vulnerability lifecycle; Diagnose and fix authenticated web application and API scan failures; Establish endpoint vulnerability management programs; Architect scanning workflows for novel systems; Drive remediation to closure with engineering and IT teams.
Seniority
Staff, hands-on IC
