Security Engineer, Vulnerability Management

Role overview Own and grow a vulnerability management and security operations program as part of a small team spanning security, IT, and compliance. The work combines security tooling, risk-based prioritization, and automation, with a focus on making remediation clear and practical for engineering teams as systems and operations expand.

Responsibilities - Select, deploy, and operate scanning tools across production assets. - Manage findings from triage through contextual severity assessment, owner assignment, remediation timelines, and reporting. - Create workflows that fit engineering practices and automate routing and follow-up so fixes can be shipped efficiently. - Build a remediation dashboard for engineering teams and leadership. - Coordinate with compliance partners to automate collection of evidence used in audits and programs. - Develop automation, including agent-based tools, to reduce manual security operations work.

Requirements - At least five years in security engineering, security operations, or software engineering, with substantial security experience. - Hands-on experience running vulnerability management or using software security scanning tools for dependencies, containers, cloud, or hosts. - Practical judgment in assessing severity in context, using CVSS as one input, and explaining business risk and urgency. - An engineering-focused approach that helps teams make and ship remediation changes. - Strong scripting and automation skills in Go, Python, or a similar language, and comfort reading infrastructure as code such as Terraform.

Nice to have - Experience with real-time media, networking, or WebRTC. - Audit support experience with frameworks such as HIPAA, PCI DSS, ISO 27001, or SOC 2. - Incident response, application security, or AI security experience, including LLM applications or agent infrastructure.

Benefits and work setup The role offers a salary and equity package, health, dental, and vision coverage, flexible vacation, and the opportunity to contribute to open-source projects.