Vulnerability Management Engineer
Core
Drives risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and software dependencies to determine if vulnerabilities are reachable and exploitable.
Role type
Senior IC vulnerability management engineer
Builds
Automated vulnerability ingestion, analysis, prioritization, remediation tracking, and mitigation workflows
Domain
Cybersecurity, cloud infrastructure, threat intelligence
Deliverable
production ML models
Required skills
Vulnerability management, exploitability assessment, threat intelligence correlation, risk-based prioritization, automation/scripting, asset inventory management, configuration analysis, incident response, compensating controls design
Preferred skills
Continuous exposure management, attack-path analysis, AI-assisted analysis, automated mitigation
Technologies
CVSS, MITRE ATT&CK, MITRE D3FEND, STRIDE, OWASP Top 10, SAST, DAST, SCA
Responsibilities
Correlate threat intelligence with asset inventory and configuration; Assess exploitability and reachability; Incorporate exploit prediction and adversary activity into prioritization; Determine immediate incident response needs; Use AI-assisted workflows to validate conclusions; Partner with Red Team to validate practical exploitability; Identify compensating controls; Automate vulnerability ingestion and remediation tracking
