Vulnerability & Exposure Management Engineer
Core
Build and operate an engineering-driven vulnerability and exposure management program to reduce real exploit risk by turning vulnerability data into actionable signals embedded in modern engineering workflows.
Role type
Senior IC security engineer (vulnerability management & automation)
Builds
Automated vulnerability ingestion pipelines, engineer-facing dashboards, and CI/CD integrations
Domain
Healthcare data security, cloud infrastructure, application security
Deliverable
production ML models | product features | dashboards & analysis
Required skills
vulnerability management, application security, automation/scripting (Python/Go), cloud security (AWS/Azure), exploitability reasoning, compliance frameworks (NIST/CIS/FedRAMP), security tooling (SAST/SCA)
Preferred skills
custom data pipeline development, regulated environment experience (FedRAMP), CI/CD integration, cloud security platforms (Wiz), security data tooling (Snowflake/Sigma), AI-assisted development tools
Technologies
Python, Go, AWS, Azure, Wiz, Snowflake, Sigma, SAST, SCA
Responsibilities
Design and implement vulnerability management capabilities, build automation workflows for signal ingestion and prioritization, develop dashboards and integrations for engineering teams, assess vulnerability findings and support remediation, embed signals into CI/CD pipelines, validate remediation efforts, support FedRAMP assessments
Seniority
Senior, hands-on IC
