Senior Engineer, Exposure & Vulnerability Management
Core
Lead the evolution of enterprise security from periodic scanning to continuous, risk-driven exposure management by designing intelligent, automated systems that identify, prioritize, and remediate security exposures across cloud and on-premise environments.
Role type
Senior IC security engineer (exposure & vulnerability management)
Builds
AI-powered multi-agent systems, automated remediation workflows, risk-based prioritization engines, and continuous threat exposure management (CTEM) capabilities.
Domain
Cybersecurity, Cloud Security, AI/ML Security
Deliverable
production ML models
Required skills
AI/LLM-based agent orchestration, vulnerability management platforms (Tenable, Qualys, Rapid7), cloud security (AWS, Azure, GCP), Infrastructure-as-Code (Terraform, CloudFormation), CI/CD integration, risk-based prioritization frameworks (CVSS, EPSS, CISA KEV), container/Kubernetes security, scripting (Python, Go, Java), attack-path analysis, compliance (SOC 2)
Preferred skills
CISSP, OSCP, GWAPT certifications, experience in regulated/life sciences environments, designing continuous exposure management programs
Technologies
Python, Go, Java, Terraform, CloudFormation, AWS, Azure, GCP, Kubernetes, Tenable, Qualys, Rapid7, CI/CD pipelines, SCA/SAST tools
Responsibilities
Design and deploy AI-powered multi-agent systems for exposure management; Build automated workflows for vulnerability analysis and remediation; Implement approval gates and audit trails for automated changes; Develop risk-based prioritization engines; Implement automated verification to distinguish exploitable vulnerabilities; Drive CTEM strategy; Assess and redesign exposure management capabilities; Architect cloud-native discovery and remediation workflows; Partner with Engineering to embed secure-by-default practices; Establish risk-based remediation timelines; Define and monitor security KPIs/KCIs/KRIs; Collaborate on controls supporting regulatory requirements.
Seniority
Senior, hands-on IC
