Security Engineer (Vulnerability Management)
Core
Security Engineer focusing on vulnerability management, threat hunting, and developing internal security tools to protect enterprise systems.
Role type
Senior IC security engineer (vulnerability management & offensive security)
Builds
Internal security tools, vulnerability scanning coverage, and threat intelligence workflows
Domain
Cybersecurity, vulnerability management, offensive security (Red/Purple teaming)
Required skills
Python, Go, C#, C/C++, Rust, vulnerability assessment, code review, web application security testing, threat hunting, networking fundamentals (TCP/IP, DNS, HTTP/S), reverse engineering, scripting/automation, cloud security (AWS/Azure/GCP), threat modeling, risk scoring (CVSS)
Preferred skills
Bug bounty triaging (Bugcrowd/HackerOne), Purple/Red team exercises, OT security, asset discovery, configuration management, infrastructure-as-code, AI/LLMs familiarity
Technologies
Python, Go, C#, C/C++, Rust, Bugcrowd, HackerOne, AWS, Azure, GCP
Responsibilities
Develop tools and processes for security adoption; conduct software code reviews for insecure patterns; perform web application security testing; triage and validate bug bounty reports; execute Purple Team exercises; support Red Team operations; build vulnerability communication processes; conduct continuous threat assessment; partner with security sub-teams; escalate critical issues; document findings and provide risk summaries
Seniority
Senior, hands-on IC
