Senior Security Research Engineer

Role overview

Lead complex work to strengthen vulnerability and threat exposure management, helping move the program toward a continuous approach to identifying, assessing, and addressing security risks. The role combines hands-on vulnerability research and validation with cross-team delivery leadership: you’ll turn program goals into measurable work, guide risk-based decisions, and help technology owners move findings toward remediation or another clear disposition.

Responsibilities

- Plan and lead cross-team workstreams, setting milestones, dependencies, success measures, and repeatable operating practices. - Research and analyze vulnerabilities, verify security conditions, filter false positives, assess exploitability and business impact, and recommend mitigations. - Improve vulnerability discovery and assessment across network, cloud, endpoint, application, container, and other technology environments. - Prioritize exposure using threat intelligence, exploitation evidence, asset and business context, control effectiveness, and remediation factors. - Validate security findings, develop proofs of concept when appropriate, and work with security teams and technology owners to remove remediation barriers and track outcomes. - Improve platforms, integrations, data quality, analytics, automation, and AI-enabled workflows; communicate risks and progress to technical teams and leaders.

Requirements

- 8+ years of relevant information security, IT, systems engineering, vulnerability management, security research, or exposure management experience. - Bachelor’s degree or equivalent in computer science, information security, or a related discipline. - Experience leading complex technical work across teams and translating goals into plans with measurable outcomes. - Hands-on background in vulnerability research, analysis, validation, risk prioritization, and remediation or mitigation guidance. - Experience assessing vulnerabilities across multiple technology domains and using discovery, assessment, validation, or exposure management platforms. - Knowledge of exploitation techniques, adversary tactics, and threat intelligence, plus experience with scripting, programming, APIs, or automation for security workflows.

Benefits and work setup

The role can be remote, with pay varying by location. Some travel may be required. Benefits include medical, dental, and vision coverage, a matching 401(k), paid time off, a wellness program, and product discounts. A bonus may also be available.