Want to know if this job is worth applying to?
United States
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Engineer, Vulnerability Management based in the United States.
The Security Engineer, Vulnerability Management will build and operate a comprehensive vulnerability management and security operations program for a growing technology platform. In this role, you will take ownership of identifying security weaknesses across production environments and ensuring that appropriate fixes are delivered quickly and effectively. You will establish the tools, workflows, and automation needed to strengthen security while supporting the pace of engineering development. Working closely with engineering and compliance teams, you will turn technical findings into actionable priorities and measurable risk reduction. You will also develop reporting capabilities that help technical teams and leadership understand the organization's security posture. This is an opportunity to shape an evolving security program within a small, collaborative team and make a direct impact on customer trust and data protection.
Select, deploy, and operationalize vulnerability scanning tools across production assets and infrastructure.
Own the end-to-end vulnerability management lifecycle, including finding triage, severity assessment, ownership assignment, remediation timelines, and reporting.
Evaluate vulnerabilities in their specific operating context, using industry-standard scoring frameworks alongside business impact and actual exposure.
Develop engineering-focused triage and remediation workflows that integrate naturally into existing development processes.
Automate vulnerability routing, follow-up, and remediation tracking to help engineering teams resolve issues efficiently.
Build and maintain remediation dashboards that provide engineering teams and leadership with clear visibility into security risks and progress.
Partner with compliance teams to automate the collection and organization of vulnerability management evidence required for audits and compliance programs.
Develop automation, including AI-agent-based tools where appropriate, to reduce manual security operations work and support organizational growth.
Continuously improve vulnerability management processes, tooling, and reporting as the platform and production environment evolve.
At least 5 years of experience in security engineering, security operations, or software engineering, with a significant focus on security.
Hands-on experience building or operating a vulnerability management program or implementing software security tooling.
Familiarity with security scanning technologies, including software composition analysis (SCA), container, cloud, or host scanning.
Strong understanding of vulnerability triage and remediation, with an engineering-first mindset focused on making security fixes practical and easy to implement.
Ability to assess the real-world severity of security findings within a specific environment, using CVSS and other relevant risk factors.
Strong scripting and automation skills in a language such as Go or Python.
Ability to read and understand infrastructure-as-code configurations, particularly Terraform.
Pragmatic risk management skills, including the ability to explain technical vulnerabilities in terms of business impact and remediation urgency.
Clear communication skills and the ability to translate complex security issues into actionable guidance for engineering teams.
Adaptability, initiative, and comfort working in an evolving environment with a high degree of ownership.
Preferred: Experience with real-time media, networking, or WebRTC systems.
Preferred: Experience supporting compliance audits or frameworks such as HIPAA, PCI-DSS, ISO 27001, or SOC 2.
Preferred: Background in incident response or application security.
Preferred: Experience with AI security, including securing large language model applications or agent infrastructure.
Annual compensation range of $200,000–$300,000 USD, depending on location, seniority, and technical expertise.
Equity package.
Health, dental, and vision insurance.
Flexible vacation policy.
Opportunity to contribute to impactful technology and open-source projects.
Opportunity to work alongside experienced engineers in a globally distributed, remote-first environment.