Information Security Engineer
Core
Triage, validate, and prioritize vulnerability submissions from external researchers and internal scans to drive timely remediation in enterprise environments.
Role type
Senior IC information security engineer (vulnerability management & application security)
Builds
Centralized vulnerability tracking workflows and defensible documentation for audits
Domain
Financial services / Enterprise security operations
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
vulnerability triage, exploitability assessment, OWASP Top 10 knowledge, SAST/SCA/DAST tool usage, source code review, severity scoring, risk prioritization
Preferred skills
vulnerability management platform experience, distributed team collaboration, financial services industry background
Technologies
SAST, SCA, DAST, OWASP Security AI
Responsibilities
Review and triage vulnerability submissions from external researchers and bug bounty programs; validate technical accuracy and business impact of findings; assess severity using established scoring methods; remove duplicates and close out invalid submissions; classify vulnerabilities and assign remediation owners; evaluate false positive requests from application teams; analyze SAST and SCA findings and perform source code review when needed; provide evidence-based decisions with clear rationale; help improve triage standards and playbooks; stay current on application security weaknesses and emerging threats; escalate high-risk vulnerabilities; communicate findings and remediation guidance to stakeholders.
Seniority
Mid-level, hands-on IC
