Security Engineer, Vulnerability Management & Security Operations

Role overview

Build and operate a vulnerability management and security operations program for a growing production platform. You’ll shape an early-stage capability end to end: identify what is running and exposed, assess which findings matter most in context, and help engineering teams ship fixes efficiently. The work also supports customer commitments and compliance evidence.

Responsibilities

- Select, deploy, and maintain scanning tools across production assets. - Own the vulnerability workflow from triage and contextual severity assessment through assignment, remediation timelines, and reporting. - Create practical remediation workflows that fit engineering practices, with automated routing and follow-up. - Develop a dashboard that helps engineering teams and leaders track remediation and act on outstanding risks. - Automate collection of vulnerability management evidence in partnership with compliance colleagues. - Reduce manual security operations through automation, including agent-based tooling where useful.

Requirements

- At least five years in security engineering, security operations, or software engineering, with substantial security experience. - Hands-on experience running a vulnerability management program or using software security scanning tools, such as SCA, container, cloud, or host scanners. - An engineering-oriented approach to remediation, making it straightforward for teams to address findings. - Ability to judge real-world severity using CVSS as one input, along with the environment and business impact. - Strong scripting and automation skills in Go, Python, or a similar language, and familiarity with reading infrastructure as code such as Terraform. - Clear communication and practical risk judgment, including setting an appropriate response priority.

Nice to have

- Experience with real-time media, networking, or WebRTC. - Experience supporting audits such as HIPAA, PCI-DSS, ISO 27001, or SOC 2. - Incident response, application security, or AI security experience, including LLM applications or agent infrastructure.

Benefits and work setup

The role offers a salary and equity package, health, dental, and vision coverage, flexible vacation, and the opportunity to contribute to open-source projects.