Cybersecurity Engineer - Vulnerability Management
Core
Build and scale an automated vulnerability management program to identify, prioritize, and remediate security risks across the firm's software and infrastructure.
Role type
Senior IC cybersecurity engineer (vulnerability management & automation)
Builds
Automated scanning pipelines, deduplication logic, software inventory/SBOM integrations, and risk prioritization dashboards
Domain
Cybersecurity, vulnerability management, software supply chain security
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Vulnerability management lifecycle expertise, automated scanning platform proficiency (Rapid7/Tenable/Qualys), data pipeline construction, software inventory management, threat modeling, risk prioritization logic, automation scripting, dashboard development
Preferred skills
AI tooling integration for security workflows, SBOM data analysis, cross-platform scanning migration
Technologies
Rapid7, Tenable, Qualys, version control systems, data querying tools, dashboarding frameworks
Responsibilities
Review and prioritize findings from automated scanners and threat intel based on exploitability; validate and deduplicate vulnerability data across sources; drive automation of scanning and remediation processes; build dashboards to measure coverage, SLAs, and progress; integrate software inventory and SBOM data into the vulnerability workflow
Seniority
Senior, hands-on IC
