VulnOps Engineer

About the role

As a VulnOps Engineer at Smartstream, you will own the end-to-end vulnerability operations function across our entire product portfolio. You will manage a single, unified, risk-scored vulnerability backlog that consolidates findings from SAST, DAST, SCA, container scanning, IaC scanning, secret scanning, CSPM, LLM-based code scans, manual penetration tests, and customer-reported issues.

What you'll do

• Own and operate the enterprise vulnerability management program, maintaining a unified backlog of security findings from multiple security scanning tools, assessments
• Manage and optimize the ASPM/RBVM platform, including tool integrations, risk scoring, business-context tagging, vulnerability prioritization, and dashboard reporting
• Drive vulnerability remediation and SLA compliance, partnering with product and engineering teams to prioritize, track
• Drive remediation of cloud and infrastructure security findings, partnering with Cloud Security and Engineering teams to track, prioritize
• Operate security automation capabilities, including automated remediation workflows, vulnerability enrichment

What you need

• Python
• Terraform
• Vulnerability assessment
• AWS
• Cloud security
• LLMs

Good to have

• OWASP